--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-21T02:41:08Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-21T02:41:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-21T02:41:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-21T02:41:08Z" name: csr-ncfng resourceVersion: "6134" uid: 0e90bf60-5b09-4c35-abcd-7fec388e761a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8587e74af3bdad8061a2eb8c4f9424759ebad0001c1afdc2f306a280fb72ff9b groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-66.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-21T02:41:08Z" lastUpdateTime: "2026-04-21T02:41:08Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved