--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-16T19:30:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-16T19:30:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-16T19:30:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-16T19:30:22Z" name: csr-68m4b resourceVersion: "5653" uid: bc722960-e2df-4d15-a4aa-d2bf0ede742a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=eb72b5843e74ec52eee4d5845bb7ca18881d908fd0095573eabf90042781533b groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-133-241.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-16T19:30:22Z" lastUpdateTime: "2026-04-16T19:30:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved