--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T14:15:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T14:15:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T14:15:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T14:15:14Z" name: csr-gjb78 resourceVersion: "6087" uid: 484d5c2f-db91-4c78-894f-40532c55d708 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7e61e9cdf48e46e2b2bb888fff3ed280d1d326a531e147f74136b3c827d62042 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-57.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T14:15:14Z" lastUpdateTime: "2026-09-11T14:15:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved