--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T14:54:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T14:54:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T14:54:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T14:54:29Z" name: csr-cz2t6 resourceVersion: "6504" uid: 6fa1da5c-0f36-4ac5-9651-1a7aae76b266 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c30adcf45843691d1ec2d8df1f5f018b0f87c241f5a51f03f74624655da83398 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T14:54:29Z" lastUpdateTime: "2026-07-14T14:54:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved