--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-03T17:34:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-03T17:34:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-03T17:34:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-03T17:34:54Z" name: csr-7sjhr resourceVersion: "6263" uid: c45d6a26-b305-4910-ae43-b7ee54f06d64 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=288d626314e6f7bccc26c22777a0a75fb60f4193baea24b1d61cfbf2bdaa3136 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-03T17:34:54Z" lastUpdateTime: "2026-07-03T17:34:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved