--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T18:25:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-31T18:25:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T18:25:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-31T18:25:53Z" name: csr-gr24r resourceVersion: "4716" uid: bbcef22e-de11-43d6-8537-5e3f0a48ce9a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=72a592aa1f5a5c9a099bc1aa81461049e03b202d9a9d1af3b6ffe39800b3e825 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T18:25:53Z" lastUpdateTime: "2026-10-31T18:25:53Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved