--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T15:35:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T15:35:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-21T15:35:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-21T15:35:24Z" name: csr-gshp7 resourceVersion: "5692" uid: c14f64aa-de24-44f9-82b6-736df4524472 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ce42fdf902191674635374affd4390ffce6aaeeec41286bd9977bed5b9c37ef6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-158.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-21T15:35:24Z" lastUpdateTime: "2026-04-21T15:35:24Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved