--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T20:04:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T20:04:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-17T20:04:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-17T20:04:22Z" name: csr-7p67q resourceVersion: "6305" uid: ef91407d-909b-4726-90e5-0bbf0daf3555 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2e9985624d1aa7a43ca203449ca62562dda533d04b028959b6ee5689baf3cb46 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-172.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T20:04:22Z" lastUpdateTime: "2026-04-17T20:04:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved