--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T15:31:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T15:31:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T15:31:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T15:31:26Z" name: csr-hv8g7 resourceVersion: "6276" uid: 35f21ca9-3cb9-42e9-8656-d8bd8b90cfef spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3f51e36183ccfb2dfc1315f77d785072bd67ea2426e47eee055431728d02067d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T15:31:26Z" lastUpdateTime: "2026-07-09T15:31:26Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved