--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T10:56:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T10:56:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-08T10:56:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-08T10:56:00Z" name: csr-ms5jg resourceVersion: "5929" uid: 2f064c5a-98f0-4ef2-bf75-a2bc698626d4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f605eff9f441323d3372cd63bb0fb39ec2e1b17c4ea4a1b74eac9a3d860c4dce groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T10:56:00Z" lastUpdateTime: "2026-09-08T10:56:00Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved