--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T23:16:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T23:16:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T23:16:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T23:16:18Z" name: csr-g5dpj resourceVersion: "6283" uid: 3f43eb21-ee87-4257-90dd-9fcbb136ee03 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ef49072866570c5a2b8e2ba3e14c8ae6c3bdd2143c9b289a9594aa5b51d41fbc groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T23:16:18Z" lastUpdateTime: "2026-07-27T23:16:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved