--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-05T02:17:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-05T02:17:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-05T02:17:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-05T02:17:46Z" name: csr-nm7k8 resourceVersion: "5874" uid: 6a07ca5b-2cf4-478c-a0c3-a98fd66a2ac6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=97067421e3e42f877a2521f065970ccefaad15aa5576b8c2a8f1383640af38f7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-05T02:17:46Z" lastUpdateTime: "2026-09-05T02:17:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved