--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T20:58:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T20:58:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T20:58:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T20:58:28Z" name: csr-4psvh resourceVersion: "5935" uid: 1b983287-1cc3-4607-9c09-f6c77d2409eb spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=bf7276c9f5bf1621b24244586b632463013762dd870afcbdda38e0721b601167 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-128-196.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T20:58:28Z" lastUpdateTime: "2026-09-10T20:58:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved