--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T12:31:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T12:31:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-09T12:31:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-09T12:31:43Z" name: csr-nbmw8 resourceVersion: "6447" uid: f3cd90ec-7d40-4d89-87f3-40cbd7e63d21 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e22cc119158e64c3f00ee897a97a69d0e991a86ea44619d51420b1f3f23b95e8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-167.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T12:31:43Z" lastUpdateTime: "2026-06-09T12:31:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved