--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T12:19:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T12:19:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T12:19:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T12:19:04Z" name: csr-c5dsr resourceVersion: "6059" uid: e8a7725a-8f4c-4639-b9b7-48a6a2541982 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=99374f6366cf6bea3cac7050e6131e9e595055bda7cdcdc3a8f05bd9b2191c46 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T12:19:04Z" lastUpdateTime: "2026-07-24T12:19:04Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved