--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T18:26:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T18:26:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-28T18:26:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-28T18:26:10Z" name: csr-xbnj2 resourceVersion: "5896" uid: b744aae2-442a-4e3d-b6e3-780899e31fc1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e6c0642d8054e870ea1eef09ac9648c282a1c62cd3e9c6c80f096ea31f968570 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-216.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-28T18:26:10Z" lastUpdateTime: "2026-05-28T18:26:10Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved