--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-18T16:44:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-18T16:44:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-03-18T16:44:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-03-18T16:44:43Z" name: csr-lqw9m resourceVersion: "6003" uid: 1507c4aa-0455-4f0e-8dcd-25a2f315d1f5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4a53089e2c3e98deafd1d932ac35be9f0c41dc4823b1423cfac3ba6e40b85c68 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-49.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-03-18T16:44:43Z" lastUpdateTime: "2026-03-18T16:44:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved