--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T00:15:51Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T00:15:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T00:15:51Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T00:15:51Z" name: csr-gnvks resourceVersion: "6368" uid: dca3ec04-2406-4dfd-9bfa-d76883bfe1d5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=13b5e246d4f8914068440eb03d8fbd9d385db18d056c3a93785cc4083a32ec7e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T00:15:51Z" lastUpdateTime: "2026-07-10T00:15:51Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved