--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-05T05:35:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-05T05:35:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-05T05:35:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-05T05:35:57Z" name: csr-pqgkp resourceVersion: "5135" uid: a9d0fdfc-8a1c-4bb1-80ed-76a55ce4a869 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=df01141e6e26a761e9a8dba4dae66eeb2eafac8c41c445fe0210c10b9ab4b31a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-08-05T05:35:57Z" lastUpdateTime: "2026-08-05T05:35:57Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved