--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T16:26:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-15T16:26:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T16:26:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-15T16:26:36Z" name: csr-knls6 resourceVersion: "6517" uid: a0b20757-a72b-4fab-b0c9-3196ececb99f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b78556c7b43a2b97d5be452b6ed5f147560d1f3a65e88f5f90b9eb6ed6aa9307 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T16:26:36Z" lastUpdateTime: "2026-09-15T16:26:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved