--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T17:36:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T17:36:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T17:36:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T17:36:20Z" name: csr-6qsjb resourceVersion: "6164" uid: 3f583490-b7c8-4c92-be9c-5a07fd1efec0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=be8c085fa7677ec5042f60fd4016e5df5394370ea8d1c513f43db4c871a912ec groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T17:36:20Z" lastUpdateTime: "2026-09-10T17:36:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved