--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T20:29:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T20:29:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T20:29:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T20:29:56Z" name: csr-48b2f resourceVersion: "5922" uid: 72b7837c-2e08-49aa-98b0-fe2f1a39ec70 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=acf11bf7d77bffefa8e2135bc1904e8f89ca50ad9fc7433d5f94031a466f0586 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T20:29:56Z" lastUpdateTime: "2026-07-31T20:29:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved