--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-24T22:29:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-24T22:29:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-24T22:29:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-24T22:29:40Z" name: csr-926lc resourceVersion: "5535" uid: d33ba450-acd5-44dc-9b33-7018abc846bf spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2182de6c81f59c7649c883676059b689a6ef302c1abaa674c26f2654fa22d21c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-04-24T22:29:40Z" lastUpdateTime: "2026-04-24T22:29:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved