--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T18:44:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T18:44:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T18:44:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T18:44:38Z" name: csr-xqc6q resourceVersion: "6425" uid: adc37789-bb1c-4224-a272-21e65655f685 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3323b49bec858552c9724ea81cdbefcab8045071350eed5bf1214407b658f92b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T18:44:38Z" lastUpdateTime: "2026-09-16T18:44:38Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved