--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T17:46:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T17:46:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T17:46:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T17:46:48Z" name: csr-r5m5g resourceVersion: "6465" uid: c199eda3-3989-4a90-9895-61a5cf572780 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=dc4fee6ca4ea494c7ce2dac4748ca84939f766ae0710c79d94c73e2f44e421b7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T17:46:48Z" lastUpdateTime: "2026-07-07T17:46:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved