--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T19:57:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T19:57:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T19:57:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T19:57:59Z" name: csr-85bmd resourceVersion: "5885" uid: 6eab4675-d16b-4b6e-b457-f691ef3d5395 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=120c49ea0fac3bbeb80b4d0d78d6416f1b9aae8ca09fbd18a4027cbe276f10f1 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-194.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T19:57:59Z" lastUpdateTime: "2026-04-22T19:57:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved