--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-17T07:51:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-17T07:51:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-17T07:51:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-17T07:51:36Z" name: csr-vqsck resourceVersion: "5405" uid: de7c0ac7-619c-4201-a456-cd7c1fb56e0d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f34058f300dd90fe73bf41460cb85e0cea76bb2f775d0992ed6937423546f8db groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-04-17T07:51:36Z" lastUpdateTime: "2026-04-17T07:51:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved