--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T07:27:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T07:27:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T07:27:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T07:27:30Z" name: csr-2vl2g resourceVersion: "5781" uid: eeacbba0-47da-4cbd-84be-0d32e2999278 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4463c7b993a59a204b7273181a739ca3446387a3ff4bf318a5f5fa3f44d5a435 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T07:27:30Z" lastUpdateTime: "2026-09-16T07:27:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved