--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T21:41:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T21:41:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T21:41:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T21:41:38Z" name: csr-r4jm8 resourceVersion: "6381" uid: 197f0681-f0f7-4795-8ef1-4d28bbe315d7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=54dce40ee5431348c968f07379a97577fd0d5bfc212869836777f98d22e73806 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T21:41:38Z" lastUpdateTime: "2026-09-17T21:41:38Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved