--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T18:49:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T18:49:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T18:49:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T18:49:53Z" name: csr-vglwp resourceVersion: "5646" uid: 5755bc56-7957-488d-b995-36897c2fcb53 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d6479070c73c7174b1493a203b3ec3dc275dabfdb61439db5941b47c0973a01a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T18:49:53Z" lastUpdateTime: "2026-07-07T18:49:53Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved