--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T20:47:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T20:47:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T20:47:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T20:47:38Z" name: csr-vt8tj resourceVersion: "6400" uid: 618d0f38-4a89-4bd0-b6e1-4348ea9ff41b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=607d68b0a5b1ec64b1d03c0d5eb7a0bb243520442083c409d815222804c3f04a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T20:47:38Z" lastUpdateTime: "2026-09-09T20:47:38Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved