--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T17:03:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T17:03:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T17:03:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T17:03:30Z" name: csr-4j7pg resourceVersion: "6174" uid: 687f7632-e1e3-4923-9019-7aa4a47c87ae spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=05b96d09e0948023560aa059d1e68b3c48cf031ab27793f9889c1a586f7dab5b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T17:03:30Z" lastUpdateTime: "2026-07-24T17:03:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved