--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T20:10:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T20:10:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T20:10:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T20:10:55Z" name: csr-bvcfb resourceVersion: "5733" uid: 85017114-289c-42fb-9ecf-446c0d192fa9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=50129926100d957accf841227a3775ba91016d1f9f8df28591b67c57b6678006 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T20:10:55Z" lastUpdateTime: "2026-09-09T20:10:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved