--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T16:32:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T16:32:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T16:32:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T16:32:14Z" name: csr-q622l resourceVersion: "6067" uid: b0ab3e26-555d-44d9-bc4d-7f6d4ed21257 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1a35a7cb2387fae6dbe6f8138ba826c83c5db9f0f63daa19de736af059449ca0 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-56.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T16:32:14Z" lastUpdateTime: "2026-09-17T16:32:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved