--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T16:13:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T16:13:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T16:13:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T16:13:32Z" name: csr-pzhrp resourceVersion: "7631" uid: 9493ec40-c951-4c3e-8cff-06b7c8a69b2c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=65e9f6b84eddb96695614aedcfdea10b51d40b09e304a411cb054ad8dfdb27b9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-144.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T16:13:32Z" lastUpdateTime: "2026-09-17T16:13:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved