--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T17:34:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T17:34:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T17:34:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T17:34:19Z" name: csr-njlsv resourceVersion: "6349" uid: 12edecb4-7b11-4047-b307-d5ad8e813a49 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c55362c287ba6de968b384468b7e0edae790cdde7c8294545cde98e761dc55e2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T17:34:19Z" lastUpdateTime: "2026-07-31T17:34:19Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved