--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T16:39:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T16:39:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T16:39:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T16:39:15Z" name: csr-7sslf resourceVersion: "6046" uid: 5afa4434-3735-4f3c-b80b-4ea5b9d10f37 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=073324c5a9870e4b88c19bde25114918c6c47e384c16060aca256485cd8bf7b9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T16:39:15Z" lastUpdateTime: "2026-07-07T16:39:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved