--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-12T00:03:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-12T00:03:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-12T00:03:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-12T00:03:52Z" name: csr-6qhgx resourceVersion: "5749" uid: ff0ec4b1-e871-431f-adba-f203f38b56cd spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=28175a79feef586e5f64f36e90c7f0a1374cb625ab8c25a08ff5c97b188e0332 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-12T00:03:52Z" lastUpdateTime: "2026-09-12T00:03:52Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved