--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T21:47:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T21:47:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-20T21:47:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-20T21:47:14Z" name: csr-7dj7q resourceVersion: "5710" uid: 3f69e07e-a664-4574-87e2-0dd63d764899 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=402d0e59dd98c8f5429626d1a0fbfb8f7f94dd9ede8a40fcf2f9f77a16cc3d10 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-102.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T21:47:14Z" lastUpdateTime: "2026-04-20T21:47:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved