--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T19:23:06Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T19:23:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T19:23:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T19:23:06Z" name: csr-bqwmj resourceVersion: "5264" uid: ec857273-0644-4aaf-b7d7-b0c86509ad65 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d4a76626b0082bd028c2027e96d3cefab6077d54e7c1fdaeaef192556b710472 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-16.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T19:23:06Z" lastUpdateTime: "2026-04-22T19:23:06Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved