--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T17:25:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T17:25:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T17:25:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T17:25:00Z" name: csr-26nvh resourceVersion: "5905" uid: d4f2e07d-e0fe-419c-9424-e1af1ed13cbe spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f9e09b3b3497ff9ae0098b28f8ca00913ff5942f20d47e32c83ad10f47a3d841 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T17:25:00Z" lastUpdateTime: "2026-09-16T17:25:00Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved