--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-06T00:50:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-06T00:50:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-06T00:50:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-06T00:50:39Z" name: csr-89nz9 resourceVersion: "6248" uid: 363cf1a6-67a0-4d4a-a2ec-0d7993487fa1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5eac25855b7df24456dd26649189f942febc02cacab9d81cefc1be148c8a3c31 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-5.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-06T00:50:39Z" lastUpdateTime: "2026-09-06T00:50:39Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved