--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T09:45:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T09:45:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T09:45:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T09:45:54Z" name: csr-vmc8z resourceVersion: "6295" uid: 1c598b6f-e401-4458-8afe-fb75d7541af3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=bb75cc488bfe2e993d015ffc041fe10e938f1cc577bfac6746e344955ba4d0da groups: - system:nodes - system:authenticated request: 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 signerName: kubernetes.io/kubelet-serving usages: - digital signature - server auth username: system:node:ip-10-0-134-128.ec2.internal status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T09:45:54Z" lastUpdateTime: "2026-09-17T09:45:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved