--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T12:26:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T12:26:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T12:26:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T12:26:48Z" name: csr-4fmh7 resourceVersion: "6104" uid: 573cf84a-07a1-415e-9ef9-bc46a5dd08cc spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e56597a19669a636b4c0ab2f32648b0196a674ea68f23ca6324fd2e66593fe94 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T12:26:48Z" lastUpdateTime: "2026-09-11T12:26:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved