--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T19:20:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T19:20:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T19:20:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T19:20:13Z" name: csr-jwf8c resourceVersion: "6396" uid: 4e98253f-27d1-4574-b6d3-d6f4fd496c6c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1b447e0a8c4a5b0217b49aced2706e15eaf48a689935b483415289b1c14e1530 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T19:20:13Z" lastUpdateTime: "2026-07-06T19:20:13Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved