--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T19:14:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T19:14:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T19:14:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T19:14:28Z" name: csr-nkrbn resourceVersion: "6269" uid: e89d6e38-b338-4cff-ae06-9fb8f7a65745 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=02b54338aadb8586d9e6f8a472355784bdb3f38e3013d4575aa3ad0ae8f9568f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-132-25.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T19:14:28Z" lastUpdateTime: "2026-07-15T19:14:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved