--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T19:34:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T19:34:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T19:34:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T19:34:30Z" name: csr-gxw4f resourceVersion: "6100" uid: 9cd1d144-0a99-4eff-9aa6-e75249aa3a3a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a57f439032bb8c3b0fd8bcbf4644819e9b7f0d0fe0ae16afb6f45aff597f795e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T19:34:30Z" lastUpdateTime: "2026-07-24T19:34:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved