--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T01:40:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T01:40:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-04T01:40:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-04T01:40:56Z" name: csr-gvfzz resourceVersion: "5264" uid: c3919f27-6991-4e16-9fe6-a4f7dbe85894 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=72b89017a5b6db7e297a024155153537daabfad9e8986379359ef4a89015d498 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-04T01:40:56Z" lastUpdateTime: "2026-11-04T01:40:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved