--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T20:14:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T20:14:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-02T20:14:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-02T20:14:16Z" name: csr-pk4tr resourceVersion: "5143" uid: 66ba58ae-57f9-4bac-b278-968b01a9f71c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b10cc2f4594ac26abc6341f70f2f8962455ca802fa0626916897b25e4e3feaf9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-02T20:14:16Z" lastUpdateTime: "2026-11-02T20:14:16Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved