--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:20:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:20:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T18:20:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T18:20:51Z" name: csr-vdd56 resourceVersion: "5764" uid: 535da244-5640-4f01-be62-fc99f2c4431f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=24fd97d4ceaa8277581aead1612921d085827a615ae4f6621129bbb889460bf1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T18:20:51Z" lastUpdateTime: "2026-04-22T18:20:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved