--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T17:51:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T17:51:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T17:51:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T17:51:40Z" name: csr-z5xgv resourceVersion: "4715" uid: ef0f1aa6-9106-42f3-b044-836977ef9392 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7d81d7561fb5b9f2c7ad598d1c71920bc4d243c41dd70d14c168b639ddaa4435 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T17:51:40Z" lastUpdateTime: "2026-10-30T17:51:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved