--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T02:28:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T02:28:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-22T02:28:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-22T02:28:31Z" name: csr-2xqs5 resourceVersion: "6705" uid: 149480e1-200f-4f5a-8053-2b3a95362967 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d4bbad46edbd5495f9f77ff11170e2526de87f3e476dced31be36084848da6ab groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-125.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T02:28:31Z" lastUpdateTime: "2026-07-22T02:28:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved