--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T18:39:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T18:39:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T18:39:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T18:39:55Z" name: csr-k9jlx resourceVersion: "6407" uid: 11be6e33-83d7-4797-86eb-5e9e635bb240 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2d8591ff448fc791fc21bac3fcdba93710741bef878c4795e05d61a0de8ee96e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-69.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T18:39:55Z" lastUpdateTime: "2026-07-13T18:39:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved