--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T16:41:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T16:41:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T16:41:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T16:41:51Z" name: csr-8hzrr resourceVersion: "5856" uid: 7715b35f-df72-4e63-9001-3c5c4946c108 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4b757aed89c279ee255d99be254518488fdd5b4c30071f997c50998530351c06 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-112.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T16:41:51Z" lastUpdateTime: "2026-09-17T16:41:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved