--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T13:58:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T13:58:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T13:58:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T13:58:49Z" name: csr-x82fh resourceVersion: "5940" uid: 07856a3c-ea96-4d8c-b7dd-8e835854942d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a3772aa8f64e6b8ec5c128986e982a6bbe2e6165cb60cd99d166c97d59caac30 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T13:58:49Z" lastUpdateTime: "2026-09-18T13:58:49Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved