--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T12:56:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T12:56:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T12:56:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T12:56:25Z" name: csr-nxjn6 resourceVersion: "4883" uid: 418c33a6-0e6a-4f86-9cb8-8ec0811cbed7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8da376b121e0982778b7cb9b9cae843f1e7ce0b7536167464ea988252566dc30 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T12:56:25Z" lastUpdateTime: "2026-10-30T12:56:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved