--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T00:19:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T00:19:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-09T00:19:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-09T00:19:54Z" name: csr-5xk9m resourceVersion: "6702" uid: c69cab4a-3512-4819-8c7d-8366f4427b46 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d3deacce5b7332fb0724258c0e2c08644edc2dbc99e44586a3b773d534096981 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-241.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T00:19:54Z" lastUpdateTime: "2026-06-09T00:19:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved