--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T17:38:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T17:38:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T17:38:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T17:38:02Z" name: csr-6clqf resourceVersion: "6508" uid: a158907d-5fe1-41a9-8d4b-9a8d9a4e8f38 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c06cfcf5125d2a61e2634073dc04ba4e15342e7b0f8a6888a6bdf06222080f44 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T17:38:02Z" lastUpdateTime: "2026-07-29T17:38:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved