--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T13:57:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T13:57:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-07T13:57:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-07T13:57:59Z" name: csr-pzfkp resourceVersion: "6028" uid: f9a21bed-7ef1-4dae-893e-1f96c84fbdd4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=70465b2c6fcf9f5da24a3459a247f5042a33dda0640f1cf61372c51a5beeab12 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-215.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T13:57:59Z" lastUpdateTime: "2026-09-07T13:57:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved