--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T16:19:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T16:19:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T16:19:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T16:19:27Z" name: csr-8rvrh resourceVersion: "5100" uid: f09c108b-38b4-4efe-92fc-ec287ad609f9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cb2b56891500e59d7b8efd74db11f4200e0543a904e73fd06785f81d8e6cf6c4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T16:19:27Z" lastUpdateTime: "2026-10-30T16:19:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved