--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T21:05:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T21:05:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T21:05:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T21:05:01Z" name: csr-lxzv8 resourceVersion: "4799" uid: 643899d0-c761-4349-abf9-3b0452c4e37c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=64a45241eb746dc2742553b9a95a17506445cfdea59606ec0155f1fe695f5757 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T21:05:01Z" lastUpdateTime: "2026-10-30T21:05:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved