--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T19:53:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T19:53:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T19:53:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T19:53:52Z" name: csr-5rjc5 resourceVersion: "5646" uid: 3127b721-a962-495b-954e-f10bb9359d16 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=91dc548b20a4f5b96e4bcc5b30d6d3eed8ca65d7bb89f72f3c745299c966826e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T19:53:52Z" lastUpdateTime: "2026-09-10T19:53:52Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved