--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T16:56:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T16:56:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T16:56:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T16:56:49Z" name: csr-2qsdv resourceVersion: "5572" uid: 22c36fe7-05ba-4887-8856-ece3de4b2d27 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8bc473ef0e24517eb674a0390646e3d70c722438bad3749a3ff6db32e39c29a7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T16:56:49Z" lastUpdateTime: "2026-07-02T16:56:49Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved