--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T17:58:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T17:58:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-17T17:58:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-17T17:58:34Z" name: csr-j6ggs resourceVersion: "6466" uid: 0f5b501c-e2cb-4165-8273-fd8452193b17 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f3400b2b8982b1bc83c7932d01f29571455d08bbc603b18b01f3a7691f578b4f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T17:58:34Z" lastUpdateTime: "2026-07-17T17:58:34Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved