--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T13:01:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T13:01:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T13:01:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T13:01:46Z" name: csr-rxpl6 resourceVersion: "5780" uid: 011b3f69-6df9-4d3d-a7f6-c00975f9bb06 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=449a6d2d8fff0731f0e41da91e5f31d1cb55ac71dfc8232f3d8cc5dcde857c67 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T13:01:46Z" lastUpdateTime: "2026-09-18T13:01:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved