--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T16:17:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T16:17:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T16:17:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T16:17:24Z" name: csr-ff4b6 resourceVersion: "6044" uid: 97accde9-5f6c-428f-8b30-fe984157e84b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8dd960c4a1ebdfd0c1a6dcdfc8b10ad11ccc05f4d338d43b57c73fe111103cb3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-138-74.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T16:17:24Z" lastUpdateTime: "2026-09-10T16:17:24Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved