--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T08:59:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T08:59:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T08:59:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T08:59:01Z" name: csr-hk47n resourceVersion: "5862" uid: 73dea63d-e00f-4509-9757-fc6293598fa3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=afd154e18f3a4dd35c3f9d6063e9547a1f930f24d0a5d371678f2c85a2aff0c1 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-132-66.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T08:59:01Z" lastUpdateTime: "2026-09-17T08:59:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved