--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T16:50:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T16:50:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T16:50:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T16:50:35Z" name: csr-m7g7n resourceVersion: "5618" uid: f5cb733b-e4fa-47f7-901b-223c1e226270 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=aa9ef4df5ebba66d9a526194b065fc9ebabdd4122724a6926d04752f2582fcaf groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T16:50:35Z" lastUpdateTime: "2026-07-08T16:50:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved