--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T11:39:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T11:39:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T11:39:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T11:39:40Z" name: csr-5vmj2 resourceVersion: "5544" uid: 34a5f9b4-308b-4f2d-8d39-b56414c9c3e2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c8c478b1e8a122ee47c417ec371d3dbb8e60fa9671f6e7399d13b0d0b5211a8d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T11:39:40Z" lastUpdateTime: "2026-07-07T11:39:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved