--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T12:06:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T12:06:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T12:06:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T12:06:19Z" name: csr-lv6lh resourceVersion: "6164" uid: 7f24e016-ae19-479d-baa6-5b4ba05d192b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=229682631c3a9d566fa48035d2549f938002b68c03374db34ca640dd6657365f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T12:06:19Z" lastUpdateTime: "2026-09-10T12:06:19Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved