--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T18:44:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T18:44:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T18:44:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T18:44:33Z" name: csr-2g9cz resourceVersion: "5883" uid: 9f5495d2-b36d-4ccd-8d95-80a92b1e5bcc spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a558e1e7364d6cbbe29b3ef7c0b2edc0c50439467096d0bc7fd2e016f932dd3e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-152.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T18:44:33Z" lastUpdateTime: "2026-09-16T18:44:33Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved