--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T02:18:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T02:18:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T02:18:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T02:18:42Z" name: csr-tztgw resourceVersion: "6303" uid: 6117d6c4-c92d-462e-8ce5-b7e6162cf222 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=07ca5ffca2c7fd0cf69584862839a1de7f52bd3665f98a5cd5fb4c1b0394b2dd groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T02:18:42Z" lastUpdateTime: "2026-09-16T02:18:42Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved