--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T07:50:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T07:50:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T07:50:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T07:50:07Z" name: csr-zmh98 resourceVersion: "6459" uid: c86aca75-2bf9-4386-8561-808138d9a802 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=302d1c148fffb1e3b0fe158936db80807dc67bd805dd134d4069d3841d6a8489 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T07:50:07Z" lastUpdateTime: "2026-07-14T07:50:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved