--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T03:47:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T03:47:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T03:47:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T03:47:25Z" name: csr-jbcfc resourceVersion: "6154" uid: 16f6eee6-d1dc-4af7-bf81-30829abf9f1d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=94adec47c8dfbd79e5e4178d8d5bc2825c7cf25ff8783803e9d7313a27b61910 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-252.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T03:47:25Z" lastUpdateTime: "2026-09-17T03:47:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved