--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-23T08:48:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-23T08:48:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-23T08:48:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-23T08:48:05Z" name: csr-rsrzd resourceVersion: "6029" uid: 7e2ef5dd-5524-4b15-8256-b53b0b5452e8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5a5cf93b91fb619ba25bc30a34326deb9b1d9209dab92ce0a31040f7ff9bd175 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-47.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-23T08:48:05Z" lastUpdateTime: "2026-04-23T08:48:05Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved