--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T17:24:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T17:24:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T17:24:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T17:24:33Z" name: csr-2fdlb resourceVersion: "5428" uid: 0c3a1c75-3b07-4316-b069-0112124141b5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=53281f567277c827d0352eeba1ab63a6f992ece3a92df3e2ebec1aebad47ecef groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-31.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T17:24:33Z" lastUpdateTime: "2026-09-16T17:24:33Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved