--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T23:51:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T23:51:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-12T23:51:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-12T23:51:30Z" name: csr-lnr2j resourceVersion: "6011" uid: c433553f-7240-46b1-ad54-70ba7f7073a4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ea1830cfc41e98bf358bc5ad47d4ba376a598ed795bae256e14390b4a7b1526e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-12T23:51:30Z" lastUpdateTime: "2026-07-12T23:51:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved