--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-02T15:14:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-02T15:14:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-02T15:14:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-02T15:14:38Z" name: csr-m9nsw resourceVersion: "5491" uid: 14ea8085-1445-4f1f-a6b6-390935cd77d5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1ea4db513e0d22131228d37980eb015f090e349e8227ff49b47a74aa02454c94 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-133.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-06-02T15:14:38Z" lastUpdateTime: "2026-06-02T15:14:38Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved