--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T22:56:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T22:56:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T22:56:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T22:56:57Z" name: csr-b7gs5 resourceVersion: "5985" uid: 3d2fcdee-b718-4811-af84-4ca54975d3fb spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4d57b89b3137a3f53866d3f183d45b7f48fb20eacc9f045c4f27287024fe620b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T22:56:57Z" lastUpdateTime: "2026-07-31T22:56:57Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved