--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T18:29:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T18:29:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T18:29:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T18:29:09Z" name: csr-czkt7 resourceVersion: "5882" uid: 1f071404-65dd-4504-aa50-dcafc3b0d458 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9e186be9b5f95b8570b174b3c6b32f98396233e32a0dd9f22b8d2509c7ce8fbb groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T18:29:09Z" lastUpdateTime: "2026-09-17T18:29:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved