--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-31T00:29:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-31T00:29:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-31T00:29:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-31T00:29:05Z" name: csr-bzgbg resourceVersion: "4839" uid: c8128c45-5336-4f80-8cf8-656d362763d1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6e46934555e069235b303b6d269d8e21e8da178c21b928ff28198cc9d22e878e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-31T00:29:05Z" lastUpdateTime: "2026-10-31T00:29:05Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved