--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T21:05:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T21:05:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T21:05:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T21:05:33Z" name: csr-v2b4w resourceVersion: "5812" uid: 54aaaf3d-b4a8-4452-aec2-35b9ff952109 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=301ce4e8e8805de298eeb97a48114333d67986a4e558de80a3b37c5c8b2f3d30 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-129-37.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T21:05:33Z" lastUpdateTime: "2026-09-11T21:05:33Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved