--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T15:33:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T15:33:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T15:33:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T15:33:36Z" name: csr-lr8bs resourceVersion: "6004" uid: 12761cd1-d55e-48af-9f48-e69bd757a656 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=733032db93fa1a0e742aec0655ebe6b6434c0ef668a0f3dd89c48caa3e62e6f6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-16.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T15:33:36Z" lastUpdateTime: "2026-07-28T15:33:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved