--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T22:05:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T22:05:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T22:05:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T22:05:21Z" name: csr-8tz9d resourceVersion: "6266" uid: 98b11e99-5822-46a6-b0d3-22871d8c538d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c150018cf6d92a52d30ebbabf08060508a76c1b06848881895e6882eb625b110 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T22:05:21Z" lastUpdateTime: "2026-09-10T22:05:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved