--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-03T23:24:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-03T23:24:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-03T23:24:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-03T23:24:30Z" name: csr-p9cv7 resourceVersion: "6061" uid: e1928c7c-2f60-4dcf-8af7-2d0cc20beecd spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=bd3b5093eb46a72bdfad9a8dd4033e45a9ea6e4c8e10b23cd2e52ccca5b5aa72 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-03T23:24:30Z" lastUpdateTime: "2026-06-03T23:24:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved