--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T11:28:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T11:28:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T11:28:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T11:28:22Z" name: csr-slcsn resourceVersion: "5689" uid: 5fac061d-00d2-4a2d-9a19-eef45cdc5876 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d1fb725e3cdcddbca8c567e9220bf5c5c1f4023f997572d1d1db846682281712 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T11:28:22Z" lastUpdateTime: "2026-07-06T11:28:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved