--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T09:30:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T09:30:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T09:30:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T09:30:09Z" name: csr-cw76r resourceVersion: "6213" uid: 4feb444b-9cd9-4582-a7ba-8c340ced73c5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d035b966f0759cffbc3524772223008e4ccd51f94ce7a92df4e02881a571efab groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-7.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T09:30:09Z" lastUpdateTime: "2026-09-17T09:30:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved