--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T19:34:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T19:34:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T19:34:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T19:34:48Z" name: csr-lnqm9 resourceVersion: "5717" uid: f8e486ec-b275-4e38-9e56-57dc85f7af0a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e11037834c9dfe6ad698d71936831ea797f49d274811a4927a51c74c16182a3d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T19:34:48Z" lastUpdateTime: "2026-07-01T19:34:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved