--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T02:55:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T02:55:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-07T02:55:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-07T02:55:20Z" name: csr-vkg85 resourceVersion: "5995" uid: 041024a4-e897-4235-9b33-8656c1fe3498 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f64b4c57bbba308b3266ef8faa06414f631542009d2f56124809fcbbdcf934a3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-131-69.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T02:55:20Z" lastUpdateTime: "2026-09-07T02:55:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved