--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T14:35:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T14:35:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T14:35:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T14:35:28Z" name: csr-vmwcg resourceVersion: "6552" uid: 1d9036b2-f449-4f9f-a85b-0e754303891d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=550e3f29905a07945da3c9363a27f6292294754de4254eb3b8c0bc43c1293c4d groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-132-120.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T14:35:28Z" lastUpdateTime: "2026-09-16T14:35:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved