--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-04T10:27:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-04T10:27:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-04T10:27:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-04T10:27:19Z" name: csr-jn2r6 resourceVersion: "5856" uid: e15f2bc7-854a-49cb-a9d0-3a4ad81cddd3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=76434854a5eee70946aedc86e8c2e003068746358593b4a79d15b39cc920dece groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-08-04T10:27:19Z" lastUpdateTime: "2026-08-04T10:27:19Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved