--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:37:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:37:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T18:37:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T18:37:45Z" name: csr-hpbmk resourceVersion: "5689" uid: ee42c821-0b06-446d-b2cd-264bf8426d48 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a97f43e31badadbfa3a28a00dea7ae29368ab2cefd7eff9babe76d6ec3edb086 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-10.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T18:37:45Z" lastUpdateTime: "2026-04-22T18:37:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved