--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T15:50:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T15:50:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T15:50:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T15:50:31Z" name: csr-bmmzm resourceVersion: "5785" uid: 6d5783df-9150-43f6-8590-38e5fd3f23b9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=dbfd05d8fa36965f81253a3d2db2bbeea45828fb49ea2fce97a445951ace1884 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T15:50:31Z" lastUpdateTime: "2026-09-16T15:50:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved