--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T17:24:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T17:24:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T17:24:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T17:24:28Z" name: csr-nn6n7 resourceVersion: "5506" uid: aa45c3fc-34f6-45fa-b6a9-08dd4ac330c9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cf1ec70497db17de5a2997857832da09b3639b41fc4cf2870642896600fb276a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-132.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T17:24:28Z" lastUpdateTime: "2026-09-16T17:24:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved