--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:46:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:46:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T18:46:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T18:46:23Z" name: csr-vl8sr resourceVersion: "5426" uid: b2f3b6df-a2da-4d48-a7ff-71ab9f6b3886 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=44a3c7dfe76294056f1b4865c1fc3421e129b02f256a68598f60335adfab220f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-84.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T18:46:23Z" lastUpdateTime: "2026-04-22T18:46:23Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved