--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T11:17:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T11:17:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-25T11:17:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-25T11:17:02Z" name: csr-w8wss resourceVersion: "5411" uid: 12266c65-81f9-4197-af92-97051185a5e7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=42f6e54f64cb4d546242013a82b0af04a0d77b13b6b6e2c193e1f82bb7307a49 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-25T11:17:02Z" lastUpdateTime: "2026-05-25T11:17:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved