--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T20:32:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T20:32:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T20:32:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T20:32:20Z" name: csr-rc6ql resourceVersion: "5944" uid: e4e37441-178d-41ec-904e-3aafa95b42e9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=054c91a02275422837a64bc68934d75df39702b929b28242865acb8185669f27 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T20:32:20Z" lastUpdateTime: "2026-09-09T20:32:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved