--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T18:17:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T18:17:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T18:17:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T18:17:45Z" name: csr-rbbtb resourceVersion: "6150" uid: 7a1c1fa5-fe78-40ca-993c-734922a09896 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=156eaec791daca7d0b59cc0fff35989865dc068d0e4af8d87728660a6a38b537 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T18:17:45Z" lastUpdateTime: "2026-07-06T18:17:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved