--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T19:23:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T19:23:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T19:23:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T19:23:01Z" name: csr-hx8p2 resourceVersion: "5405" uid: 304cc382-2571-437e-8c14-b93036c459d5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ac8e4aa95cf44954195a21f49c3f32a02aaf901fd1bf5af81982cf2103c989b2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-15.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T19:23:01Z" lastUpdateTime: "2026-04-22T19:23:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved