--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T10:01:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T10:01:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-08T10:01:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-08T10:01:31Z" name: csr-8c9m2 resourceVersion: "6494" uid: 131c5253-9764-4c31-aa35-2463c684a0ed spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=360562af2aa2c7d4a1e53480ab8ee50668f5df225a62ae924ea19876e4fc3a4d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-238.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T10:01:31Z" lastUpdateTime: "2026-09-08T10:01:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved