--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T21:30:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T21:30:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T21:30:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T21:30:39Z" name: csr-gmxlf resourceVersion: "6230" uid: f7006cb1-5776-412e-b98a-3a7e1858afa5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=39d449b1440555df1df23eff11657aad7e220f5cf61b5162d41090f40cd718a1 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-142-211.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T21:30:39Z" lastUpdateTime: "2026-09-11T21:30:39Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved