--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-19T14:46:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-19T14:46:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-19T14:46:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-19T14:46:35Z" name: csr-6w7df resourceVersion: "5764" uid: 0d95e841-b92e-4070-8cf9-b79b680b37e8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1c34c382fab1d8140057cafcd35cdd1a95a4451b35c3006988e9443080fe6c90 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-19T14:46:35Z" lastUpdateTime: "2026-07-19T14:46:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved