--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T15:08:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T15:08:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T15:08:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T15:08:46Z" name: csr-545zn resourceVersion: "6325" uid: 82007f4b-9571-43c0-94c6-420cdcfa1062 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=bae8864a374ec28d5789c0f601f3f62ff81e6ea9cf0e154254c36eea5d593b91 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T15:08:46Z" lastUpdateTime: "2026-09-11T15:08:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved