--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T09:13:58Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T09:13:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-15T09:13:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-15T09:13:58Z" name: csr-f9dhd resourceVersion: "6167" uid: bb45008d-79e7-4e76-8c7e-1f1f482eff10 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=03a9c41007f3482ca853b7add14d67904dfb7d3da9fb43180e1024df0c1d892f groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-31.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T09:13:58Z" lastUpdateTime: "2026-09-15T09:13:58Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved