--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T21:19:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T21:19:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T21:19:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T21:19:12Z" name: csr-xxql6 resourceVersion: "5961" uid: 94e9926e-5d89-48c5-8b21-89fbef0033f5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2c689f40800e8f55d594d4b4754e3892ead06c2cf4934cceac7510285944210d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-146.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T21:19:12Z" lastUpdateTime: "2026-09-10T21:19:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved