--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T16:56:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T16:56:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T16:56:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T16:56:25Z" name: csr-vshtt resourceVersion: "6140" uid: c6b399f9-e490-4a04-8d22-94d4a67425fd spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=77205ddb7be2027223951b9854c40d0b7e7f0beeec9c925c64425e7fd44935a7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T16:56:25Z" lastUpdateTime: "2026-07-15T16:56:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved