--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-04T23:56:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-04T23:56:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-04T23:56:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-04T23:56:56Z" name: csr-lzt2g resourceVersion: "6078" uid: 8f4c7067-9c71-4262-b8d2-688488346325 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=02006ef01a658fb7fff96731ecddedd3905d859b5c5f36a7d6bde432a230d98c groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-182.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-04T23:56:56Z" lastUpdateTime: "2026-06-04T23:56:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved