--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T19:38:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T19:38:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T19:38:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T19:38:31Z" name: csr-7lh5q resourceVersion: "6462" uid: c58ecd07-5a03-46b2-9f49-76ff2771bdf2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0e9022b6b0ee88332a4858910381dbc11602882ab60a539af56446e41a16eb73 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T19:38:31Z" lastUpdateTime: "2026-09-18T19:38:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved