--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T20:54:08Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T20:54:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-09T20:54:08Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-09T20:54:08Z" name: csr-hqkl4 resourceVersion: "5975" uid: 79bf8b5f-51cd-41dd-83d0-61c60b64e67c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5edfb8e9efc7bd9edea199ec5e89edd5400d971d7f96c3afce569ebcb3c488fa groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T20:54:08Z" lastUpdateTime: "2026-06-09T20:54:08Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved