--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-03T01:04:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-03T01:04:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-03T01:04:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-03T01:04:35Z" name: csr-bmrkl resourceVersion: "5599" uid: 45936260-9d55-4ed8-83b4-3605c30014f9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8d758839bdb43e6b963873ef964fd5d40a9df0c4228489cc72d2319ec23c9604 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-91.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-03T01:04:35Z" lastUpdateTime: "2026-06-03T01:04:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved