--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T23:13:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T23:13:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T23:13:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T23:13:03Z" name: csr-49bw8 resourceVersion: "5543" uid: e99215d7-f865-4962-8aa9-1300852688bc spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a251c6810aba924f9e463428ffb59eb69206e60304d85ee39b902d86e3e2a620 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T23:13:03Z" lastUpdateTime: "2026-07-07T23:13:03Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved