--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T18:34:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T18:34:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T18:34:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T18:34:11Z" name: csr-rzjsc resourceVersion: "5889" uid: bfec97e3-da4f-4790-a1f8-b0ec0ba3adf5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cf76808f2fcb5d124bf543bb0d5cbdf805395bce8729a97cafb7b1306ad26f69 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T18:34:11Z" lastUpdateTime: "2026-07-29T18:34:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved