--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-03T08:51:58Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-03T08:51:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-03T08:51:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-03T08:51:58Z" name: csr-pvbwx resourceVersion: "6186" uid: 419b2735-5522-42e6-9512-f127b82d0d37 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fd33ff4c4f1b23f2e6eecbf9ac0f1c8786a2671e57ab4bb2b03268b820635975 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-03T08:51:58Z" lastUpdateTime: "2026-06-03T08:51:58Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved