--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T15:53:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T15:53:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T15:53:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T15:53:55Z" name: csr-h75fs resourceVersion: "5575" uid: edbb9656-07f9-460f-af37-d7b02ddb128e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=327eb8f7d23742fba1ca6a815026e05389f862b7cb2829a0cff2a10fe2fd177f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T15:53:55Z" lastUpdateTime: "2026-09-17T15:53:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved