--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T11:55:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T11:55:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T11:55:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T11:55:16Z" name: csr-6q9dm resourceVersion: "6572" uid: b2362e51-65d7-491f-b79a-d53b7c21ce57 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1fe0c152f8ea282ba0b0953c27c63dbf3876b19e38725b07d1581b7cf32e2f38 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-32.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T11:55:16Z" lastUpdateTime: "2026-09-16T11:55:16Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved