--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T16:12:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T16:12:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T16:12:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T16:12:16Z" name: csr-rvknv resourceVersion: "5244" uid: 8caa3588-0be0-4d4d-bae5-334b8a110714 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cecd8303e04c472273e963a5dc7c4ebc265dac1ad007aa71509a6dd4952a5e5b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T16:12:16Z" lastUpdateTime: "2026-10-30T16:12:16Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved