--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T15:54:06Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T15:54:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T15:54:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T15:54:06Z" name: csr-b5dqp resourceVersion: "5974" uid: 40cb0e5d-9196-4892-b8d0-8c64acfdfaf7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=327eb8f7d23742fba1ca6a815026e05389f862b7cb2829a0cff2a10fe2fd177f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T15:54:06Z" lastUpdateTime: "2026-09-17T15:54:06Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved