--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T15:57:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T15:57:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T15:57:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T15:57:21Z" name: csr-9dx4q resourceVersion: "6438" uid: 367a8165-fd50-48fe-9f4d-2fd56a5300db spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2ac29ad106121991868ecf3ee27183b91c57656df91d1e2d5e058c8b1e160718 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T15:57:21Z" lastUpdateTime: "2026-07-08T15:57:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved