--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T23:48:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T23:48:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T23:48:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T23:48:14Z" name: csr-n2jwm resourceVersion: "6495" uid: 9c314c58-a880-49d6-b05d-79b0add00c6d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=185b7ac80edf9a2025c80ca19e864cc517ec8a4fc029eef4020969c5477ad2be groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-09T23:48:14Z" lastUpdateTime: "2026-09-09T23:48:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved