--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-11T03:42:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-11T03:42:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-11T03:42:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-11T03:42:36Z" name: csr-phtrj resourceVersion: "5772" uid: 3df1f1c5-8995-4a06-8d42-70a8bdaaf003 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d9114291a53c1f25450204626222f4dfaa50639948b6f80399ab35291b332660 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-11T03:42:36Z" lastUpdateTime: "2026-07-11T03:42:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved