--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T12:13:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-20T12:13:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T12:13:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-20T12:13:56Z" name: csr-rqn48 resourceVersion: "5481" uid: 292f23fb-2a48-4189-b14f-d8663d9a23e1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fa80bc2c00b72e07c228ece97aec716963d18d18b7bfff377bd6b24f9d98f15a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-55.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T12:13:56Z" lastUpdateTime: "2026-04-20T12:13:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved