--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T11:30:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T11:30:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-17T11:30:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-17T11:30:23Z" name: csr-zgwzf resourceVersion: "5846" uid: 4c6643b1-be67-4e70-a1fd-a0a170e62f5f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0d4ad60e5343bc20280e14485f79e800fb29c67d6629ccb068ecfa6cba29d080 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-64.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T11:30:23Z" lastUpdateTime: "2026-04-17T11:30:23Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved