--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-10T12:03:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-10T12:03:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-10T12:03:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-10T12:03:00Z" name: csr-8tfff resourceVersion: "6139" uid: c8a37ba1-4297-44e7-8307-8e2ef5d4e675 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e7b63e7a1fdbca792e1b63212872949701e077daea573a48523db7fbe520c856 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-93.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-10T12:03:00Z" lastUpdateTime: "2026-06-10T12:03:00Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved