--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T00:29:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T00:29:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-31T00:29:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-31T00:29:25Z" name: csr-dbg46 resourceVersion: "5497" uid: c137bdc5-065c-4896-9a11-191b8d2cd939 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1279e79eb70a8dc09f738e353d32518db0978b399712f376ed9b6da7ae7bc72d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-153.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T00:29:25Z" lastUpdateTime: "2026-10-31T00:29:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved