--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T22:16:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T22:16:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T22:16:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T22:16:51Z" name: csr-ptgc9 resourceVersion: "5770" uid: 9b132123-12a7-4c1c-b4df-3ca7d9271694 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6dfed34124585a1f9bc755b9197601b1b3adf1eeed8ac10464c9df0fe36488c0 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T22:16:51Z" lastUpdateTime: "2026-09-18T22:16:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved