--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T19:30:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T19:30:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-03T19:30:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-03T19:30:52Z" name: csr-r8b6f resourceVersion: "5212" uid: 85abd339-c531-47e1-8376-68905809aa67 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=29a0fa834dcbef7c8acfb5593e7715dec46f440d32a9452eb8d3023a201b6399 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T19:30:52Z" lastUpdateTime: "2026-11-03T19:30:52Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved