--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T17:57:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T17:57:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T17:57:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T17:57:02Z" name: csr-64wck resourceVersion: "6254" uid: bce30b6b-3bda-403d-8308-7d920b48013e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7531f097f2969ba71b297fe4e2ec05fe1027ff37c82545c39c34695da42a138a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-244.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T17:57:02Z" lastUpdateTime: "2026-07-28T17:57:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved