--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T16:50:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T16:50:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T16:50:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T16:50:51Z" name: csr-65xxq resourceVersion: "6112" uid: 6db1c138-5b81-4d8f-9c99-3280389c3023 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=aa9ef4df5ebba66d9a526194b065fc9ebabdd4122724a6926d04752f2582fcaf groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T16:50:51Z" lastUpdateTime: "2026-07-08T16:50:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved