--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T19:37:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T19:37:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T19:37:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T19:37:50Z" name: csr-w4kht resourceVersion: "5760" uid: 842c0681-9f6c-44ca-b4a7-5508f1dde8e8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b448e521d7e22d58f75db8cd79d3b61ee69db1b5d778ca21bb55d676bd1858cb groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T19:37:50Z" lastUpdateTime: "2026-09-18T19:37:50Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved