--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T12:48:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T12:48:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T12:48:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T12:48:15Z" name: csr-ghzlh resourceVersion: "6085" uid: d1de2852-547d-41de-869f-d200736391bb spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=42a915bc9e21ef78f1cbf81e7dd16ac6c93ec0e091d129b5165dba4c6297f137 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-139.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T12:48:15Z" lastUpdateTime: "2026-09-16T12:48:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved