--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T09:12:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T09:12:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T09:12:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T09:12:42Z" name: csr-5jbdz resourceVersion: "5931" uid: 028d81fd-942f-417a-ac1d-f488515df08f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5c675e80074901e3add83983e13c77805c90a0c407678ab373a8b9cf7f68e983 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T09:12:42Z" lastUpdateTime: "2026-09-11T09:12:42Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved