--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T15:10:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T15:10:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T15:10:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T15:10:31Z" name: csr-8dwk6 resourceVersion: "5610" uid: 2885bcd1-7425-4f2a-87d9-bb95de12579a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=533dfd214820b700743d2a55fa30c33a4ace74c4cebf2e3c79d8250b5661f36d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T15:10:31Z" lastUpdateTime: "2026-07-14T15:10:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved