--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T16:33:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T16:33:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T16:33:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T16:33:50Z" name: csr-g9qrl resourceVersion: "5586" uid: 37029ee3-12a9-4ade-959c-07137df8eac9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1790d51e8eb4ae1b66d6d1716d6db9d5201c24d1fbd94770058ab73f53b87f9a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T16:33:50Z" lastUpdateTime: "2026-07-08T16:33:50Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved