--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T01:10:05Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T01:10:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-04T01:10:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-04T01:10:05Z" name: csr-f2t85 resourceVersion: "5391" uid: 7b140419-af25-4704-9aa3-584c21196ef8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7d83fb96f5422ab646d1a738bd7d9ff127c981965d4a715decdb24d35fb6a1c8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-04T01:10:05Z" lastUpdateTime: "2026-11-04T01:10:05Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved