--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-28T17:10:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-28T17:10:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-28T17:10:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-28T17:10:12Z" name: csr-fjzdl resourceVersion: "6184" uid: d24476c8-5eea-47c0-9be0-0ffb916f08a9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=19afc4766ad00ae6e15549521006b4ce694fe43c0c390e69cec5a033cdb70813 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-28T17:10:12Z" lastUpdateTime: "2026-05-28T17:10:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved