--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T22:05:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T22:05:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T22:05:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T22:05:23Z" name: csr-kg2hn resourceVersion: "6415" uid: 2a817aff-2451-415a-988c-d7eee96aeadc spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9f2cb2c67bd0db09c96a69965bbeb4a13622c3e3e4f8d145f0fe7e95103e4129 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-143-165.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T22:05:23Z" lastUpdateTime: "2026-09-10T22:05:23Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved