--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T19:00:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T19:00:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T19:00:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T19:00:35Z" name: csr-62wnc resourceVersion: "5963" uid: d532a733-a5cc-45b1-bdbc-5f2a5a1f58e9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d9ca8d4ae18c4714a1bcfdb7a27e6198cb01e140c2078ebaabd67b89a18a2c4c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T19:00:35Z" lastUpdateTime: "2026-07-07T19:00:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved