--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T14:11:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T14:11:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-07T14:11:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-07T14:11:02Z" name: csr-qb2km resourceVersion: "6522" uid: b340e5f5-f8b8-4ee6-a703-5e072529d091 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=37d4a2b2f057c0b23e2dcc5b32c92f3c51ba5d6a0e94185734f1aff3787622b3 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-136-215.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T14:11:02Z" lastUpdateTime: "2026-09-07T14:11:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved