--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T12:11:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T12:11:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T12:11:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T12:11:13Z" name: csr-g5j26 resourceVersion: "6156" uid: 048a541b-3f6a-4f0e-8d93-f1dbefef16e2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=757f8bdedeea0b35acac7fd205e45803a695e538e3efb7bceaa9391cf114fafc groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T12:11:13Z" lastUpdateTime: "2026-07-15T12:11:13Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved