--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-27T17:43:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-27T17:43:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-27T17:43:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-27T17:43:31Z" name: csr-g5829 resourceVersion: "5659" uid: 2b3f26cd-d8ef-4021-8480-3642b06454e4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=102ddf47c49fbaaf8cb0cdb28be61b46058aaab1de741d0d2b1943ffc035ec25 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-27T17:43:31Z" lastUpdateTime: "2026-05-27T17:43:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved