--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-20T17:03:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-20T17:03:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-20T17:03:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-20T17:03:59Z" name: csr-s89qd resourceVersion: "6610" uid: adedbb22-2264-4765-9221-58b4308a9570 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a1ac48cc6767b9ce0fca55f955526d4305ac016ca5b12fdc94fce59766be6d1b groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-67.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-20T17:03:59Z" lastUpdateTime: "2026-05-20T17:03:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved