--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T18:34:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T18:34:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T18:34:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T18:34:10Z" name: csr-ntjq6 resourceVersion: "5878" uid: cea26720-b1bb-41fd-a36c-02d58bd86e46 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4fdca155f19acdea9e046fac4449116a7cdf2776c03dbefda5c9b06595e8459e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T18:34:10Z" lastUpdateTime: "2026-07-29T18:34:10Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved