--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T13:32:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T13:32:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T13:32:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T13:32:55Z" name: csr-4nqd2 resourceVersion: "5613" uid: 0c4afda7-3876-463b-b4f4-fbd773b48a4e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0dd58ba3e36be6c3db5ca5c3be5555a0e29e92e14a3db302a7f4eb785401b30a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-207.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T13:32:55Z" lastUpdateTime: "2026-09-16T13:32:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved