--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T18:29:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T18:29:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T18:29:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T18:29:11Z" name: csr-grjrk resourceVersion: "6027" uid: 94bcb0ee-67ed-408e-a6de-bf175f687711 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6085b292954f04033fdc81a3c2858623b228173e800a50c52e8b5bd5c10f96b5 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-132-9.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T18:29:11Z" lastUpdateTime: "2026-09-17T18:29:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved