--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T03:06:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T03:06:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T03:06:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T03:06:33Z" name: csr-5k5pw resourceVersion: "5658" uid: 3f3c7c00-c803-4361-ad7a-554d2e42cc74 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1aabe5fde546cf697b024002e1a92b2f4f99a19e4b9a10472e080359a4421b19 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-18T03:06:33Z" lastUpdateTime: "2026-09-18T03:06:33Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved