--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-15T12:33:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-15T12:33:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-15T12:33:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-15T12:33:55Z" name: csr-bnpr5 resourceVersion: "5750" uid: 52dd2530-d277-408e-a075-baa42ae6be57 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1b20c0c686592f16b9cc6934bc7973da40ee3b6de7aad308c0b93e55fb687681 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-15T12:33:55Z" lastUpdateTime: "2026-09-15T12:33:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved