--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T16:11:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T16:11:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-22T16:11:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-22T16:11:44Z" name: csr-6psth resourceVersion: "5662" uid: a4067d6c-9e81-4306-bd44-7ff0a6941b83 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b3ac1ceb119374fbf55840ed340cdde999ff3f72b8e4547dfcc248319b46dba7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T16:11:44Z" lastUpdateTime: "2026-07-22T16:11:44Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved