--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T15:01:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T15:01:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T15:01:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T15:01:44Z" name: csr-lnp7b resourceVersion: "6147" uid: e179228c-7123-4708-ac38-f50c85876418 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b7b48f7c88883431e2672fc1940365884ea130e038da671ee34c5a64de267dc6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T15:01:44Z" lastUpdateTime: "2026-07-29T15:01:44Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved