--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-22T13:21:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-22T13:21:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-22T13:21:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-22T13:21:22Z" name: csr-vv52j resourceVersion: "5252" uid: aa89de61-a7fb-4548-b475-567c20f903d0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=30d35d4622cab7058f10f3c7ea778a950acc87f9d09100158d3f6aadd9591422 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-04-22T13:21:22Z" lastUpdateTime: "2026-04-22T13:21:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved