--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T17:14:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T17:14:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T17:14:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T17:14:48Z" name: csr-7fdls resourceVersion: "5879" uid: 5e3421c5-019e-4bf6-8988-15ef41c83dd8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5cd0cd66d531978fddec43ac55046f3d68aa2c943c18065201ba1c851f849e76 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T17:14:48Z" lastUpdateTime: "2026-09-18T17:14:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved