--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T14:14:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T14:14:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T14:14:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T14:14:50Z" name: csr-7986l resourceVersion: "5652" uid: b2b87b09-5a53-4f33-ba49-8e415ea384b8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b6505a78a141170689194c7d193e017e164a05ad0a8efa472b8e375a88f5ef25 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-110.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T14:14:50Z" lastUpdateTime: "2026-09-11T14:14:50Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved