--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T11:55:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T11:55:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T11:55:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T11:55:27Z" name: csr-qnrbk resourceVersion: "5223" uid: 0e646ba4-2acb-4ef0-b35d-3a26a674f1f2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c2d673843bc4a3ca21d220e3f4509542c19c37ff527b3fc9184d9e103440e3e2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T11:55:27Z" lastUpdateTime: "2026-10-30T11:55:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved