--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T21:38:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T21:38:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T21:38:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T21:38:45Z" name: csr-8k9ll resourceVersion: "6256" uid: e25cecc0-e0a0-4334-b3e8-fe9d4d1cabe9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=dcbb3a6ea61e188d899f33bc7fb29ca196c4fa54c5313680c87df0a347621e50 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T21:38:45Z" lastUpdateTime: "2026-09-09T21:38:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved