--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T23:07:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T23:07:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-11T23:07:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-11T23:07:31Z" name: csr-2pg25 resourceVersion: "6445" uid: 5c3fe24f-28b3-4800-85b9-df69dfcb6b5d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f98f9f9c152238cbe7a9d279010f1bf3dd5799746cb241ef6069a3d6d05bdc95 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-254.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T23:07:31Z" lastUpdateTime: "2026-06-11T23:07:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved