--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T22:13:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T22:13:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-16T22:13:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-16T22:13:31Z" name: csr-vk4r8 resourceVersion: "5730" uid: fd3a307f-bcb1-4d6c-a5d7-1a1a9f7f600d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=59fb095672184ed88ebb46a10cd1d7d6f2c1d51eaede12eaf2c2f8f7f0eb85ae groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-72.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T22:13:31Z" lastUpdateTime: "2026-04-16T22:13:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved