--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T12:47:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T12:47:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T12:47:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T12:47:02Z" name: csr-9dwdr resourceVersion: "5853" uid: 0199b046-9464-45d8-b4ec-30ba2089de02 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9d773db9b17fe6b672be26a6fbb082daab5f237f67e2bd1da8056aa099f5d310 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T12:47:02Z" lastUpdateTime: "2026-09-11T12:47:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved