--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T20:55:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T20:55:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-08T20:55:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-08T20:55:39Z" name: csr-tst44 resourceVersion: "6453" uid: 4c14b1e4-2b7b-4a4c-8e7c-04c017fbf2df spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e98f0a139b03e66b986eacfb96457939f318119ec79e26d780f510bba08cbac6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-08T20:55:39Z" lastUpdateTime: "2026-06-08T20:55:39Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved