--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-05T05:36:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-05T05:36:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-05T05:36:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-05T05:36:28Z" name: csr-4k57t resourceVersion: "5830" uid: f0968501-1f74-4ca0-b80a-5a194b83fea4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=df01141e6e26a761e9a8dba4dae66eeb2eafac8c41c445fe0210c10b9ab4b31a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-08-05T05:36:28Z" lastUpdateTime: "2026-08-05T05:36:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved