--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-23T17:41:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-23T17:41:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-23T17:41:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-23T17:41:07Z" name: csr-nhxm7 resourceVersion: "5570" uid: 5cba1daa-8625-41aa-92b5-30089ce21b82 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c9e81b94ee95b66069a4cf2a452c2b41fffb6a735cd6869e2db412b67f0f3a85 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-215.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-23T17:41:07Z" lastUpdateTime: "2026-04-23T17:41:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved