--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T07:30:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T07:30:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T07:30:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T07:30:13Z" name: csr-p4gnt resourceVersion: "6549" uid: cee342b7-147c-4b0b-92d0-4bfe0b5a3fe4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fc0b0ff121d3f555581aa89df23d1cc500ae8010500fc75471d5dfb4799891bd groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T07:30:13Z" lastUpdateTime: "2026-09-16T07:30:13Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved