--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T16:19:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T16:19:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T16:19:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T16:19:02Z" name: csr-zxh6b resourceVersion: "4550" uid: 7c6a5e95-0af7-4926-a01b-7f5f3b34bba7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b211afaa60fc7bd26c05c7acd2b3049ffe0be482eece50405bb31e435c515da1 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-40.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T16:19:02Z" lastUpdateTime: "2026-10-30T16:19:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved