--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T12:02:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T12:02:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-15T12:02:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-15T12:02:30Z" name: csr-b7jgf resourceVersion: "6729" uid: 3d973ea5-42b4-43ec-8d32-655b614b1725 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9bdf63c3f6c3e7e67866316bb9880789afb13341f181612695e04233a00caed4 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-139.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T12:02:30Z" lastUpdateTime: "2026-09-15T12:02:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved