--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T09:15:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T09:15:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-15T09:15:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-15T09:15:30Z" name: csr-p4xtz resourceVersion: "6286" uid: 5a8e2ab8-8dd0-4830-9454-9cf98bc746e9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=38a08a40f88bf135cd22df0db8933d05568bc3e1ec72e6da77b668019a17691e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-33.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T09:15:30Z" lastUpdateTime: "2026-09-15T09:15:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved