--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T12:26:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T12:26:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-31T12:26:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-31T12:26:35Z" name: csr-ts6s8 resourceVersion: "4797" uid: 5d204829-aec0-43e9-b9fd-97e0f95fdb7f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0424ffb095a7766de297bc57187e549e6833d5234d957d502bf853ef4def4bc6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T12:26:35Z" lastUpdateTime: "2026-10-31T12:26:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved