--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T18:43:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T18:43:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T18:43:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T18:43:29Z" name: csr-qjqxn resourceVersion: "5836" uid: 6b6545c3-c30a-4805-989f-183089384ce8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=842ba9c9fa9c83f1b8eead81ff5ceb9f6fff81384a45f16aca1b23f627a848a3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T18:43:29Z" lastUpdateTime: "2026-04-22T18:43:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved