--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T09:57:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T09:57:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-08T09:57:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-08T09:57:54Z" name: csr-ss85d resourceVersion: "6058" uid: 9a7a7cdc-b990-40ca-bca9-557e4132b5b9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e0c9661ee0838cce2d57c7e2d27d5d7bd1c8699b079d311a13f5d5dbde8a3a3a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-80.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T09:57:54Z" lastUpdateTime: "2026-09-08T09:57:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved