--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T15:33:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T15:33:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T15:33:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T15:33:51Z" name: csr-kbqnv resourceVersion: "5449" uid: 789b4314-b110-4045-ac8f-5a2f8a5ae8ab spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=725901c55c574d3a1d79f19d3e51a1b28a3c8535e5ea9438d69e9f9d4297c4a3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-30.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T15:33:51Z" lastUpdateTime: "2026-04-22T15:33:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved