--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T16:26:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T16:26:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-15T16:26:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-15T16:26:23Z" name: csr-llfvc resourceVersion: "6116" uid: a494a313-0a25-4c88-a779-88d79dc1f595 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b78556c7b43a2b97d5be452b6ed5f147560d1f3a65e88f5f90b9eb6ed6aa9307 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T16:26:23Z" lastUpdateTime: "2026-09-15T16:26:23Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved