--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T21:41:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T21:41:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T21:41:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T21:41:40Z" name: csr-pthsz resourceVersion: "6528" uid: d221c59a-4455-48cc-b9cd-1c9d4890ffe7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=07667153e3abf9c0730e77d31b3784f4b32a87d143b79ec3f793014b7874210d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-170.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T21:41:40Z" lastUpdateTime: "2026-09-17T21:41:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved