--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T19:56:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T19:56:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T19:56:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T19:56:27Z" name: csr-r9dbd resourceVersion: "5836" uid: 4d9af3f3-6ca1-40e8-ad50-20d456567d75 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=22c641f348bae38e4da5227c0d872ebc8debba518b79a9b0aa68e738f31a9601 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T19:56:27Z" lastUpdateTime: "2026-07-02T19:56:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved