--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-01T22:21:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-01T22:21:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-01T22:21:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-01T22:21:40Z" name: csr-57h7v resourceVersion: "4728" uid: 8e4fcf11-84d9-4777-abfe-d1f7eb9e8ff0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a3c32632a6be5f6eb79e93b0b4b48197cac2ed28707f002e880d5a5cad1f665a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-01T22:21:40Z" lastUpdateTime: "2026-11-01T22:21:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved