--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T22:05:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T22:05:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T22:05:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T22:05:33Z" name: csr-rfbwh resourceVersion: "6701" uid: c022e6bb-0c0a-46e5-b38b-5e0883de9506 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=515f7e3383e9abd5db6e081a82c697abbc0165950c909e0e9bebf81480f25a22 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-25.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T22:05:33Z" lastUpdateTime: "2026-09-10T22:05:33Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved