--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T18:29:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T18:29:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T18:29:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T18:29:35Z" name: csr-6cltf resourceVersion: "6392" uid: b91c920d-f8d5-4ad6-b352-52c1cafc7b92 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=972594610eb9f6d492767244f7f6af5736c5683354708ee21010b27d7f6df8cd groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T18:29:35Z" lastUpdateTime: "2026-09-17T18:29:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved