--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-22T16:55:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-22T16:55:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-22T16:55:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-22T16:55:42Z" name: csr-jlt4j resourceVersion: "4874" uid: cf81a017-f7de-4013-9eb9-2e11286ae599 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cae9ce91ab8ea218c8894400723b6208fb9e4f039ed712a5d411b05bc7ef6c1a groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-135-234.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-10-22T16:55:42Z" lastUpdateTime: "2026-10-22T16:55:42Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved