--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T23:46:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T23:46:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T23:46:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T23:46:49Z" name: csr-cjdgn resourceVersion: "5740" uid: 1b8a56b1-95d2-457e-92a4-c06abf0dbbd3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b5ae0f4792cc6e73e5020cbb61513c5bb9c4595b95bd1bc7d8608ebaa2c55a33 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T23:46:49Z" lastUpdateTime: "2026-07-15T23:46:49Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved