--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T21:49:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T21:49:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T21:49:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T21:49:24Z" name: csr-55jr7 resourceVersion: "5560" uid: c0e53387-66a6-4c77-9d48-8d8db9ad3229 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=25cac21b4d1a820d313d6c4cc529079ced08e46503285b9525da886eba19f656 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T21:49:24Z" lastUpdateTime: "2026-09-18T21:49:24Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved