--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T11:51:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T11:51:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T11:51:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T11:51:29Z" name: csr-fmj6k resourceVersion: "5704" uid: 92991779-b492-4225-8437-b1488533bc0b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=229f6cc6d7b97387af9535a0c67795023b5b16e586ebcaae7c73bdaf2df23b68 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T11:51:29Z" lastUpdateTime: "2026-09-10T11:51:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved