--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T03:20:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T03:20:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-21T03:20:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-21T03:20:12Z" name: csr-s2k6b resourceVersion: "6563" uid: 5e16030b-349f-4905-8d32-166311a96d26 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5974c6a4b4e6c3cf45a8759e982c5222b0ff049eda5fd1831dc6f92f345d98f2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-76.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T03:20:12Z" lastUpdateTime: "2026-05-21T03:20:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved