--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T17:08:37Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T17:08:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-07T17:08:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-07T17:08:37Z" name: csr-pv9d5 resourceVersion: "5377" uid: 4ec220ed-8eef-4e7f-a044-1a82a88c4560 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=77c76c11ab30a6eaa1c240d8f0181471f1ef4c2815e09777b5513b8c118adf72 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-5.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T17:08:37Z" lastUpdateTime: "2026-09-07T17:08:37Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved