--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T20:38:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T20:38:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-21T20:38:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-21T20:38:21Z" name: csr-4sd4f resourceVersion: "5675" uid: 3529491b-e74f-40dc-8681-87d91594907c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e61feec19d89759b55bbf20425031c58db4cc8f3f0c0ef0a3c2ce27da3b6bf9a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-158.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T20:38:21Z" lastUpdateTime: "2026-05-21T20:38:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved