--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T09:57:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T09:57:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T09:57:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T09:57:15Z" name: csr-42j68 resourceVersion: "5976" uid: f127caaa-29a8-4505-9e00-fe77e73331f0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a63e887059b62dd74a0c6f2b9df8d82cef1e4473b0500c71a973aefd4f4d4394 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T09:57:15Z" lastUpdateTime: "2026-07-20T09:57:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved