--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T16:01:58Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T16:01:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T16:01:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T16:01:58Z" name: csr-thgxj resourceVersion: "5525" uid: 1ab9febb-91ee-412c-bd64-7b923b9ee06c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f2cf6be4ed96e12195cb8af1a8290a087fbcb10afa8937afb1864e5004c7306e groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-132-43.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T16:01:58Z" lastUpdateTime: "2026-09-10T16:01:58Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved