--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T13:42:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T13:42:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T13:42:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T13:42:41Z" name: csr-6fmvq resourceVersion: "5667" uid: a86dfa37-136d-4c2f-9b0a-9185a0a091c1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0fa39afb8774fde6204df0671cf787b4414195e4485e62fba0cb68453ba684f1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T13:42:41Z" lastUpdateTime: "2026-07-24T13:42:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved