--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T01:58:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T01:58:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T01:58:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T01:58:28Z" name: csr-ftj2m resourceVersion: "6472" uid: d88324be-12a2-4104-807e-982c74a6243d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=dc0c253e976b369cc7f753d1e8667a4100b2bc3af0a13fb827054305faf13709 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T01:58:28Z" lastUpdateTime: "2026-07-16T01:58:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved