--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T17:33:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T17:33:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T17:33:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T17:33:43Z" name: csr-7tjgf resourceVersion: "5613" uid: 7bdd454f-68fb-4960-91ac-f28c2548257d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8ec9a77f78a50a5cd35265b916f56396e5910051894cb50302ab545185aa3a3d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T17:33:42Z" lastUpdateTime: "2026-07-16T17:33:42Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved