--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:42:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:42:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T18:42:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T18:42:18Z" name: csr-4dxbq resourceVersion: "5536" uid: 2bf9d94e-7d7c-41f5-a3ba-dad034dfeca4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=94127d2c0f97a6bd7dde8aa653682437583b4bb0de2f9dd8eef33b4793eb4130 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-223.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T18:42:18Z" lastUpdateTime: "2026-04-22T18:42:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved