--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T23:39:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T23:39:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T23:39:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T23:39:12Z" name: csr-vtdp9 resourceVersion: "6102" uid: 61281326-4b2c-4422-ba82-f5cf748162e9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=190d80950fd40f9503b96fd7bef943587fe89776e134e44852c053e2fcc69d86 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T23:39:12Z" lastUpdateTime: "2026-07-13T23:39:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved