--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T13:34:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T13:34:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-03T13:34:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-03T13:34:09Z" name: csr-7jk8t resourceVersion: "5254" uid: 6cee252f-d7e4-48b5-ba1f-431f8e50cc0e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0987e1fcc8eae662aab25ce676cb540349cbec53aa3f27d4796884042364748a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T13:34:09Z" lastUpdateTime: "2026-11-03T13:34:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved