--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T15:30:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T15:30:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T15:30:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T15:30:15Z" name: csr-p76bz resourceVersion: "6471" uid: a52e12d1-6694-4f58-815f-001e815ff36f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5de423d0650942b3505566140d9be967d1bfe702bc02d14dbe7ab37c2960e650 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-15.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T15:30:15Z" lastUpdateTime: "2026-09-17T15:30:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved