--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T23:35:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T23:35:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T23:35:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T23:35:45Z" name: csr-lnmx5 resourceVersion: "5937" uid: fb345eff-57fc-4569-a5bc-d7e66eddd782 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=497e507e5842eb03a6ae27d75ff3efa3504c5edc175eb83398189356a2b69ec5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-119.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T23:35:45Z" lastUpdateTime: "2026-07-15T23:35:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved