--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T18:13:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T18:13:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T18:13:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T18:13:33Z" name: csr-hdtk4 resourceVersion: "6216" uid: 1d77c1fe-ed30-4d18-83fd-8c3c7dc9eec0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3a0a88cdbec9a153034808eaf47aa00208db956ed0ca8d0b50cde02dc4a612c9 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-253.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T18:13:33Z" lastUpdateTime: "2026-09-17T18:13:33Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved