--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T21:49:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T21:49:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T21:49:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T21:49:36Z" name: csr-2rcn2 resourceVersion: "5943" uid: 5be99cd6-70ac-4524-8c87-caee206a8baa spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ff9ac76d32c9a491b2d1d76051d8184a1e389126e3e493fe0ce88b6674725d1e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-88.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T21:49:36Z" lastUpdateTime: "2026-09-18T21:49:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved