--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T10:56:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T10:56:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-08T10:56:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-08T10:56:15Z" name: csr-wnsr2 resourceVersion: "6379" uid: d681e814-8254-4b98-bf0e-8041e31bd048 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6b272e5f11585e66992ba697288a099be903166f1bb485bd17013fe0c4ea7998 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-163.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T10:56:15Z" lastUpdateTime: "2026-09-08T10:56:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved