--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-29T16:56:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-29T16:56:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-29T16:56:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-29T16:56:43Z" name: csr-5qddc resourceVersion: "5133" uid: 758c25ad-c054-466c-8a4d-aa9a50c0cf67 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e690724cd1393b3ac295e92fac911c24910f213805792c8b14129c421cff5da6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-133.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-29T16:56:43Z" lastUpdateTime: "2026-05-29T16:56:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved