--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T11:16:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T11:16:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-17T11:16:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-17T11:16:31Z" name: csr-lndpt resourceVersion: "5621" uid: fe43268f-1fc5-42a9-92ba-c17c09d7260a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f600aaedeb6c64b06bcafbded8cbe21087f92bfaa17c37e635138a9b5f98a9e8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T11:16:31Z" lastUpdateTime: "2026-04-17T11:16:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved