--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T14:54:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T14:54:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T14:54:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T14:54:12Z" name: csr-gk5x9 resourceVersion: "6117" uid: 7a8e0c22-451f-4a1e-be4a-7ef764fbe312 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c30adcf45843691d1ec2d8df1f5f018b0f87c241f5a51f03f74624655da83398 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T14:54:12Z" lastUpdateTime: "2026-07-14T14:54:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved