--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T05:48:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T05:48:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-04T05:48:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-04T05:48:46Z" name: csr-j549h resourceVersion: "5286" uid: 2c890691-d109-4479-a7f6-ae7c598972d2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=23cb23ae6266f0ccdde4da054baa16b29928d9cac5636a527f16bd2b3643aa29 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-04T05:48:46Z" lastUpdateTime: "2026-11-04T05:48:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved