--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T21:38:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T21:38:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-02T21:38:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-02T21:38:59Z" name: csr-78rks resourceVersion: "5361" uid: b86740a4-ddc5-4f83-bc26-d37f03fdf153 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=935fe68ca066f484133be22bd25cef436389da3595ab4f18744db478c92fc1df groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-02T21:38:59Z" lastUpdateTime: "2026-11-02T21:38:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved