--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T20:20:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T20:20:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T20:20:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T20:20:14Z" name: csr-xrrm9 resourceVersion: "5866" uid: 00a708b2-1db2-4f15-b4c5-afc0024d71ed spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c17b777f5f0968c23aad8f9b97237c05fb1cb118ccb02b8912f647ee7f3dbf5a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-100.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T20:20:14Z" lastUpdateTime: "2026-09-18T20:20:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved