--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-05T17:12:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-05T17:12:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-05T17:12:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-05T17:12:20Z" name: csr-2blps resourceVersion: "5364" uid: d506868a-c095-4d07-9886-48d0e811b3cb spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=dd72b8ac81bd6d7cb25501424597aa9e875435a82b4f1963e37aae112faa7663 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-121.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-08-05T17:12:20Z" lastUpdateTime: "2026-08-05T17:12:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved