--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T18:48:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T18:48:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T18:48:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T18:48:17Z" name: csr-9bgdx resourceVersion: "5960" uid: 4bcfd0a3-4b72-41c9-9379-ff227c2616c3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3dfd90d8d16da2945071db8f85f6f96a02ff2d36ec4322d02e183431326b1c78 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-253.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T18:48:17Z" lastUpdateTime: "2026-09-11T18:48:17Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved