--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T02:06:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T02:06:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-21T02:06:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-21T02:06:00Z" name: csr-phn27 resourceVersion: "6225" uid: 8fab132b-2f07-43a1-8d82-ca94b7913420 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c32eb39222f41fce7a4e4d252c1466ab3a7f06696e64767f65dd496c02f55923 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-223.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T02:06:00Z" lastUpdateTime: "2026-05-21T02:06:00Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved