--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T19:43:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T19:43:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-28T19:43:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-28T19:43:39Z" name: csr-7tmgz resourceVersion: "6076" uid: ea26a22b-7835-463e-9778-75d8e2539f6b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d3d292c0b81e9ddc2606266c91a1a66f00a05a1d33786c9d2d5d7de7d9e78888 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-195.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-28T19:43:39Z" lastUpdateTime: "2026-05-28T19:43:39Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved