--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-05T17:19:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-05T17:19:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-05T17:19:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-05T17:19:27Z" name: csr-chct9 resourceVersion: "6009" uid: 75d9ec02-fcf9-411c-91fe-4af319b70d88 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4e19d2d62f3a74e78c488c18781fb14774e8c80d4992ff029c46e383c41427f8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-08-05T17:19:27Z" lastUpdateTime: "2026-08-05T17:19:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved