--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T16:52:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T16:52:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T16:52:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T16:52:47Z" name: csr-x8bwk resourceVersion: "6301" uid: 910b973c-2af6-4cc1-91d6-e126c7121639 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=019a367f69df496e13bdcdb1482b1d78192fe80fe92aad2b979ffc19ecdb69d5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T16:52:47Z" lastUpdateTime: "2026-07-16T16:52:47Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved