--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-06T02:51:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-06T02:51:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-06T02:51:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-06T02:51:22Z" name: csr-ddsv7 resourceVersion: "5815" uid: 63d0cdfc-70d8-43c8-ac9f-d072d1f9816d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3f71bc569f7766d14c03afe769495b167d72b7a9ad287f119a79d47bda26940b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-06T02:51:22Z" lastUpdateTime: "2026-09-06T02:51:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved