--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:54:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:54:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T18:54:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T18:54:48Z" name: csr-g2j84 resourceVersion: "5901" uid: a6d08ae1-39e7-4b42-931c-762f0fe29a0c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=36e9e5b956a98781b1d73e91f282c08c3dd3c6d6fde367d1d401d2cff463f85d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:54:48Z" lastUpdateTime: "2026-07-09T18:54:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved