--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T16:30:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T16:30:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-11T16:30:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-11T16:30:51Z" name: csr-rnr6z resourceVersion: "5922" uid: 60fa6341-bda0-4f63-8865-57e271591ed0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2cf1a96750611f439278eab6478d9a570ca7cab6da0d45238355c90fda5fad9c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T16:30:51Z" lastUpdateTime: "2026-06-11T16:30:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved