--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T15:55:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T15:55:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T15:55:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T15:55:09Z" name: csr-4ggvl resourceVersion: "5825" uid: 94f26384-e047-4be7-9fe6-2c76747f32f6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=09ccc788315f35efe9a22a16ee59ecbbd0bc2d55ba3183c6173dbb369cbf11c5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T15:55:09Z" lastUpdateTime: "2026-07-10T15:55:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved