--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-12T01:44:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-12T01:44:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-12T01:44:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-12T01:44:55Z" name: csr-bvkx8 resourceVersion: "5905" uid: a15dbf98-d248-427e-8a37-289b9de5db53 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=07a8fc5a8305457f78e560f5162b55baf76644e86e84398affa455b698c7dadc groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-251.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-12T01:44:55Z" lastUpdateTime: "2026-09-12T01:44:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved