--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-06T10:30:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-06T10:30:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-06T10:30:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-06T10:30:19Z" name: csr-jsqs2 resourceVersion: "6646" uid: 8d2ba445-d7cc-42ef-b240-b6a93bc021a9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0a60dc9743150afd61e22b3856524db01c50ee19188887f51c1b7fecc5e3da98 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-130-119.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-06T10:30:19Z" lastUpdateTime: "2026-09-06T10:30:19Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved