--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T11:34:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T11:34:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-08T11:34:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-08T11:34:21Z" name: csr-jgdcr resourceVersion: "6395" uid: 1beb4012-9264-4154-9c9b-162dfc3e2ce0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ecfe3d1c14a0b833e163ad39825579e4f7d2e78bb062ac041e8fa2a99e65b621 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-13.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T11:34:21Z" lastUpdateTime: "2026-09-08T11:34:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved