--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T15:45:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T15:45:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-02T15:45:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-02T15:45:52Z" name: csr-x4snm resourceVersion: "5599" uid: cec1c232-36f7-486c-a952-e39987e77a66 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=eefd7c4bde5a47df54e300c70326e687ad6c3e6e39913d529f9eb8b79a8c024b groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-129.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-02T15:45:52Z" lastUpdateTime: "2026-06-02T15:45:52Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved