--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T14:33:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T14:33:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T14:33:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T14:33:21Z" name: csr-7cll5 resourceVersion: "6197" uid: 8e4a301a-e552-4789-8afe-aacb19a9f162 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=bdbf1aec8fd981d9316a70ec75fbc81ca11ad5cc6ac47ea45b7b644135062ca2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T14:33:21Z" lastUpdateTime: "2026-09-09T14:33:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved