--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T02:37:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T02:37:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T02:37:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T02:37:38Z" name: csr-p8s78 resourceVersion: "5828" uid: ea7c2b51-0768-4c9b-92c1-6fd817ec02c9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4cc16af78f102d12e22b3e437c06e0798ee0fc2e2ce451c1b64c97b336b4f951 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T02:37:38Z" lastUpdateTime: "2026-09-11T02:37:38Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved