--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T12:36:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T12:36:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-10T12:36:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-10T12:36:45Z" name: csr-zr9hn resourceVersion: "6332" uid: 6f3d53c4-bbf1-4b61-a41f-27d8c01ce44e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d3bf69816d1fe8bd40722b995c65cb037fdab37df3f1e96bda0295c7dc83d2d0 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-72.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-10T12:36:45Z" lastUpdateTime: "2026-06-10T12:36:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved