--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T15:33:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T15:33:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-26T15:33:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-26T15:33:51Z" name: csr-tzktz resourceVersion: "5805" uid: f520fc5a-2051-4508-93f1-2627af9e8f11 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=dcbf55b0302ee62b91f05c68311591231b0ef04eee405ddb65828df2f8236be8 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-132.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T15:33:51Z" lastUpdateTime: "2026-05-26T15:33:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved