--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T20:54:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T20:54:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T20:54:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T20:54:26Z" name: csr-rkj4w resourceVersion: "6020" uid: d95b7660-fcef-4ea1-85eb-166fd7032242 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0cd6d78369f9c980ece626c0670939a2781fc0b7015322ee82d089b60f4e771d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-16.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T20:54:26Z" lastUpdateTime: "2026-09-10T20:54:26Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved