--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-29T23:12:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-29T23:12:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-29T23:12:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-29T23:12:52Z" name: csr-mpb99 resourceVersion: "6982" uid: fd97b7f5-9e0f-4560-a467-0bb89127eec6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=52d50e0f133a0f733e9d1abfe669b33f86daaf1dfc8b5b712d63f64288f965e1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-29T23:12:52Z" lastUpdateTime: "2026-10-29T23:12:52Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved