--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T19:49:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T19:49:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-03T19:49:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-03T19:49:21Z" name: csr-x2w97 resourceVersion: "4768" uid: 7d386200-ae8e-401d-a946-9a17568ca1f3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4206177b5074197eecb2c362c697c127d80178b4953e2a37d4f96ecdf350e4f1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T19:49:21Z" lastUpdateTime: "2026-11-03T19:49:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved