--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T21:52:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T21:52:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-12T21:52:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-12T21:52:32Z" name: csr-rxjk8 resourceVersion: "5871" uid: 4a57f5ff-064c-4067-a3b9-48f268824690 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2705b54471ad9ada2e33a56ba62459c0fb27615482ba36f247e6606671895fa0 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-12T21:52:32Z" lastUpdateTime: "2026-07-12T21:52:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved