--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T03:04:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T03:04:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T03:04:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T03:04:12Z" name: csr-z4hzm resourceVersion: "6280" uid: 435ab29b-27ec-4e44-abd0-33ab21aff7f4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f7d0ebdcefc78e1947a14e89bd64258807771a973339cf1958713ec6a99ae5dd groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-137-88.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T03:04:12Z" lastUpdateTime: "2026-09-18T03:04:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved