--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T13:24:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T13:24:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T13:24:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T13:24:47Z" name: csr-w79p2 resourceVersion: "5820" uid: 212f6eef-21ef-40c5-a5df-891ea875728d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d5f39b094122e52cfcf370f449824d2fdedd18f6d94d30a1014bd2e5a71039d7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T13:24:47Z" lastUpdateTime: "2026-07-09T13:24:47Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved