--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T08:58:58Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T08:58:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T08:58:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T08:58:58Z" name: csr-kv59k resourceVersion: "5716" uid: 4311234f-c73d-46f3-96f4-3666f5491a3a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d5ac620284d65fa203dc2eaf635f17719df19f6bffa8ba037deb03865b1bd73a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkF6Q0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE15TFRZMkxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkx2WHJyL2xybTM4ZUtMa3ltK2M1WTJSVHYwZG5pOFR6K3o0bVBCZzNqTEEKYk8vTEROMktVUzQ0NmNoU3Bodm0wRVVIODYxbDRObDVlMG0wQUx3YkJxT2dBREFLQmdncWhrak9QUVFEQWdOSApBREJFQWlCOTVjUDV5aksyVFFFVzNBMkJyQ3RYYjR5RU5VcGNvbXRwOXN0eTl3UjhPZ0lnTVd3YUVBUDkzaU1nCmJXcVpERDQwSjgwb2tIU0I4V2xMejJ4Ylp2dHlicVE9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T08:58:58Z" lastUpdateTime: "2026-09-17T08:58:58Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved