--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T22:24:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T22:24:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-20T22:24:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-20T22:24:31Z" name: csr-kmfw5 resourceVersion: "6117" uid: aeb99cb8-8bc4-4130-a5af-03904f9df5a3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=98dfec1f38b29f6bfb6be747be66e4d8e5ce1aa41f6c010fd25b11c2af876a5a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-132-177.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T22:24:31Z" lastUpdateTime: "2026-04-20T22:24:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved