--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T16:36:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T16:36:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-11T16:36:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-11T16:36:07Z" name: csr-vcc26 resourceVersion: "6485" uid: 69afe52c-e3c1-4280-aea4-f00e9b2234b4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=22c434bab48577feea661f9080214157930eed6124fdb3dda7489e3419ca972d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T16:36:07Z" lastUpdateTime: "2026-06-11T16:36:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved