--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T23:22:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T23:22:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T23:22:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T23:22:26Z" name: csr-djxvd resourceVersion: "5772" uid: 6c97f592-42bd-4be1-a664-7a196773e8ee spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a95bde9a65a3d5012ffaf1437cd3b3ade9a2c3b740c3d0ecdd09f2f628b0b873 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T23:22:26Z" lastUpdateTime: "2026-07-02T23:22:26Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved