--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T18:38:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T18:38:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T18:38:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T18:38:22Z" name: csr-j7468 resourceVersion: "5075" uid: a0335c6b-84b1-4bf7-ac85-419b6f6af9f0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9273be167bd8fe8e8410e60c3eae4d196177482f243f3dffca0cdc627fd8e805 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T18:38:22Z" lastUpdateTime: "2026-10-30T18:38:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved