--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-14T17:02:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-14T17:02:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-14T17:02:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-14T17:02:17Z" name: csr-jxvff resourceVersion: "6380" uid: 41be7a73-c7bb-46d6-9add-30337672e297 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=977406228e90c13c1266b3ca87784b2cb38167008a5cf400bd4b50afa03e3c1a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-14T17:02:17Z" lastUpdateTime: "2026-06-14T17:02:17Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved