--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-18T16:44:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-18T16:44:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-03-18T16:44:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-03-18T16:44:18Z" name: csr-2jvpd resourceVersion: "5424" uid: f1996753-dba8-49e5-ad09-4a4c4ceec708 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e1b31c419a0b19e4a30b358e1ebea35953cd437f928e90c0b0fe690b233200c6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-219.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-03-18T16:44:18Z" lastUpdateTime: "2026-03-18T16:44:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved