--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-04T21:53:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-04T21:53:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-04T21:53:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-04T21:53:46Z" name: csr-dhshr resourceVersion: "6335" uid: 3513219d-9efe-45c7-b4e8-0a9d6db7604d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0958af7b176412a6ce4b890edd60818996d9d4d47fa796de94b5e893a4bb586e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-04T21:53:46Z" lastUpdateTime: "2026-09-04T21:53:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved