--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-12T18:35:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-12T18:35:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-12T18:35:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-12T18:35:46Z" name: csr-s8kxg resourceVersion: "6084" uid: 2d6f3465-cdab-4a45-9da6-61434987e4ad spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=69a5464d12c8ecea375a4d55c60205c077e9fb003e7d90eb6cc60a25f2c60f4c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-108.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-12T18:35:46Z" lastUpdateTime: "2026-06-12T18:35:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved