--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T20:08:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T20:08:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T20:08:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T20:08:18Z" name: csr-46rlm resourceVersion: "5876" uid: fdae93a7-0b3c-4080-9516-724e3d38bbf1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d0b31e21ebb577088d2346d55a61814ec50995f689003afcf7b3bbed731fd208 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T20:08:18Z" lastUpdateTime: "2026-07-28T20:08:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved