--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T11:14:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T11:14:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T11:14:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T11:14:44Z" name: csr-5v2wb resourceVersion: "5462" uid: f84ae075-b70f-4b92-ac95-137af7bd6d11 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9992975359e4be618b215489d367c91797bf5fbee4dcc5966b671f647c0de918 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-141-40.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T11:14:44Z" lastUpdateTime: "2026-09-10T11:14:44Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved