--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T20:32:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T20:32:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T20:32:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T20:32:20Z" name: csr-hljt5 resourceVersion: "6025" uid: 124cdb48-92c0-4f2f-b5ff-4b095a5610b8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=054c91a02275422837a64bc68934d75df39702b929b28242865acb8185669f27 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T20:32:20Z" lastUpdateTime: "2026-09-09T20:32:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved