--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-14T11:00:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-14T11:00:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-14T11:00:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-14T11:00:56Z" name: csr-zrpwf resourceVersion: "6222" uid: 6c867ecc-bb01-46e1-8859-238a78101f44 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=780eceb62eb8a60d7b1413d2c94c3c1788abe68ebc59c5db526c5902fdccbce9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-230.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-14T11:00:56Z" lastUpdateTime: "2026-09-14T11:00:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved