--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T21:11:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T21:11:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T21:11:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T21:11:41Z" name: csr-4f4ww resourceVersion: "6090" uid: 7247dfbe-78cb-466d-889f-a35a2eb9fdc6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e8c76a45546e9142709d8d906fc1a9440504f38186156bd6b3b5a68f9795e527 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T21:11:41Z" lastUpdateTime: "2026-07-01T21:11:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved