--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T16:37:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T16:37:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-25T16:37:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-25T16:37:27Z" name: csr-ttfjg resourceVersion: "6284" uid: f1c32b75-53da-4ef2-9df2-1e3bb4e357b8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b8bce37c8ebbde54a81b20880e0f1d83017870733bfe16409afbdd9f80627cb2 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-164.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-25T16:37:27Z" lastUpdateTime: "2026-05-25T16:37:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved