--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:03:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T18:03:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:03:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T18:03:35Z" name: csr-fwljj resourceVersion: "5650" uid: 41790317-f64f-4e02-b14b-aefeffc73fb9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2c1575b565d748cf8c941daf8470cdbd669fd772a102e81b13ccb15f31c71065 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:03:35Z" lastUpdateTime: "2026-07-09T18:03:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved