--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T14:14:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T14:14:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T14:14:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T14:14:48Z" name: csr-6b57d resourceVersion: "5517" uid: 2328b988-a804-4800-88ef-be493c1c92e1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a57a959b59328be5fcf8588ae0eb813b80fb47edfc4cc408ed2c63bbc0a9390d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T14:14:48Z" lastUpdateTime: "2026-09-11T14:14:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved