--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T22:04:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T22:04:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T22:04:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T22:04:31Z" name: csr-ddxrn resourceVersion: "6364" uid: 833b73a2-9abf-41bd-be88-62df08a9c59a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8152cc92e7a303996a31824c7e4350b2b80bc9d25def8af25726905cf563b05a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T22:04:31Z" lastUpdateTime: "2026-07-28T22:04:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved