--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T12:39:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T12:39:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-21T12:39:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-21T12:39:53Z" name: csr-7kdjb resourceVersion: "6128" uid: 8e0ff8c0-f914-4553-bd49-5d0c1ecd5285 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b04f5fe3d53aeebb8ae4e39e6e039ca20993cee984ac779a941ee3f95c4219cd groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T12:39:53Z" lastUpdateTime: "2026-07-21T12:39:53Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved