--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T19:18:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T19:18:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T19:18:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T19:18:03Z" name: csr-8vb5w resourceVersion: "5935" uid: e8c4b0bf-a7e6-41b9-887a-adb9fd26fc4b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fdb5c0fa4e159e45da47e2ec62931358df7bdd08aca381b347d53469e6c54fc8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T19:18:03Z" lastUpdateTime: "2026-07-01T19:18:03Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved