--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-05T06:25:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-05T06:25:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-05T06:25:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-05T06:25:52Z" name: csr-8wgcf resourceVersion: "5650" uid: 028a5216-6058-40e5-9df3-bafaf5976b13 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d58d94549eee8d59a5464171e5e4533ecd2b0e76b9f85a13fd894486b18afd8f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-05T06:25:52Z" lastUpdateTime: "2026-09-05T06:25:52Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved