--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T06:56:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T06:56:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-26T06:56:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-26T06:56:44Z" name: csr-7nnrd resourceVersion: "5211" uid: 29cb2965-933c-447f-8882-627e1367edb7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a5986aa8dc13c2772de43be136e94fa95a09cb83b7902cfd659c48fa12fb9f44 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T06:56:44Z" lastUpdateTime: "2026-05-26T06:56:44Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved