--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T13:31:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T13:31:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-20T13:31:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-20T13:31:14Z" name: csr-7jss7 resourceVersion: "6023" uid: 9bd55371-cc08-47c8-a543-7bf19462cba7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ed461f700ddc22dfadcd9bfaae6f5324f07eccef5cc3b325f6df066dc180944a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T13:31:14Z" lastUpdateTime: "2026-04-20T13:31:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved