--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T16:40:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T16:40:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-22T16:40:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-22T16:40:18Z" name: csr-cr44n resourceVersion: "5926" uid: 187ad6b8-36bf-4cfd-b98d-51ec8ba50065 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d2e9f4128913783ad5bc09dcac50c890ec0a55b54ac6917da3882e02ba086bd9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T16:40:18Z" lastUpdateTime: "2026-07-22T16:40:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved