--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T21:50:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T21:50:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T21:50:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T21:50:46Z" name: csr-s92lh resourceVersion: "5702" uid: 8347cf1f-9f62-4aff-9027-905d29aa6236 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=84995020c6ca54952b779c961333cec0e3655f61eec8b64e9fc23b414ab1eb96 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-133.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T21:50:46Z" lastUpdateTime: "2026-09-18T21:50:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved