--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T16:52:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T16:52:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-21T16:52:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-21T16:52:03Z" name: csr-m7l45 resourceVersion: "5871" uid: 44587238-5581-4a0b-a06c-3b076543bcba spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f5d970b28c04c3e5e7cd19fd049f1f3255ede9f2b653aef862832cbe5f4c7ac2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-164.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T16:52:03Z" lastUpdateTime: "2026-05-21T16:52:03Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved