--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T15:01:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T15:01:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T15:01:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T15:01:43Z" name: csr-qdscg resourceVersion: "5922" uid: e5320e63-126e-43d0-959a-35d9b5d176b0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=22cac6fd8b21c4ee44564adcb517730d6f4d19926a91c834713c98d35ee17e76 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T15:01:43Z" lastUpdateTime: "2026-07-29T15:01:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved