--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T14:29:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T14:29:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T14:29:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T14:29:24Z" name: csr-4f5n2 resourceVersion: "5728" uid: c079465c-269d-4620-8d09-fe39dc2f4515 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7089f8c61c8bea44cccf6191ffc94d036b50f969f604f4ef383fc2254e8f6a93 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T14:29:24Z" lastUpdateTime: "2026-07-14T14:29:24Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved