--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T02:30:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T02:30:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T02:30:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T02:30:18Z" name: csr-wqhhq resourceVersion: "6225" uid: 1d67d7d3-d6dd-4b15-aba2-5321c2dd9758 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1222227697f32d2f6c40f341f9ac141893a769e87c6563e4b8bb510ac2848c45 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T02:30:18Z" lastUpdateTime: "2026-09-09T02:30:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved