--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T08:05:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T08:05:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-02T08:05:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-02T08:05:38Z" name: csr-qljq4 resourceVersion: "5371" uid: 4373531e-bd76-446a-8ec0-bf55cc5b4fc3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4215c84c997696cc1e8ae2d68f709d11a42df33ed8de33bacdbb5b08fe6a9aeb groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-02T08:05:38Z" lastUpdateTime: "2026-11-02T08:05:38Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved