--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T14:02:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T14:02:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T14:02:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T14:02:19Z" name: csr-rzz78 resourceVersion: "6588" uid: 88f111b7-07dd-4ff4-a886-7091e27bae6a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=712640664bf5b800e74c36ff0aa5adbf2d1424f54cd9ff4549b6b414f418d014 groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-140-12.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T14:02:19Z" lastUpdateTime: "2026-09-17T14:02:19Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved