--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T12:14:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T12:14:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T12:14:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T12:14:21Z" name: csr-rmwq5 resourceVersion: "5856" uid: 98b35c8e-37ca-4e37-ad9e-e4b6af92f9b3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f271b86ae9a305a42e0a02d4b71602b6784f4be67f6df5d5ea91b6acd45eb0f6 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-239.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T12:14:21Z" lastUpdateTime: "2026-09-11T12:14:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved