--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T11:22:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T11:22:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-07T11:22:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-07T11:22:50Z" name: csr-l588g resourceVersion: "6230" uid: b646bd4b-3e3b-48c8-b945-adfeb0582b25 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1b82e433ffc1f8aef81870884dea3afb7f266850483da30750d3eb34b87d4008 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-163.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T11:22:50Z" lastUpdateTime: "2026-09-07T11:22:50Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved