--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T19:43:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T19:43:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-28T19:43:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-28T19:43:15Z" name: csr-jvfbs resourceVersion: "5330" uid: ed0dcc22-6a36-4847-9cc2-4d9fabdb65aa spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=34fc833ef090a3b9cabb88017f44b3789acf5b4d26927e41d75b432854db52ce groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-28T19:43:15Z" lastUpdateTime: "2026-05-28T19:43:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved