--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T18:53:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T18:53:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T18:53:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T18:53:09Z" name: csr-vzwzr resourceVersion: "4808" uid: ca4f6197-63bb-4a92-ac73-3679c65532ea spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=70dadff7a7d74be946b61dd7127e7d422a6f1c157b4ba2c3802cbf80ab2dadd2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T18:53:09Z" lastUpdateTime: "2026-07-01T18:53:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved