--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T08:54:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T08:54:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T08:54:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T08:54:55Z" name: csr-bsb5m resourceVersion: "6235" uid: 4cc4b067-64fa-4e19-8c29-59bd05af457d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3ec25df23d9696e8ecfb7047aa95df66577b526985e2d07ad9a4aca29959e20a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-139-204.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T08:54:55Z" lastUpdateTime: "2026-09-18T08:54:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved