--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T22:33:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T22:33:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T22:33:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T22:33:10Z" name: csr-9bs7q resourceVersion: "5507" uid: 0be98abb-5d52-40d9-97d6-8b0ff49d2e67 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b354d8795ffc84ade41fd0944f68b00e6533acb8ca5e6c7be38cbd71e65facf4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T22:33:10Z" lastUpdateTime: "2026-07-16T22:33:10Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved