--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-18T16:43:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-18T16:43:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-03-18T16:43:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-03-18T16:43:17Z" name: csr-fv58l resourceVersion: "5489" uid: a0016a55-8cf6-4047-88c6-97464666aa84 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1ec18c7435971db749c578ba749bd808a6c680ebde214a155f739526ad887bbe groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-5.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-03-18T16:43:17Z" lastUpdateTime: "2026-03-18T16:43:17Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved