--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T15:47:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T15:47:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T15:47:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T15:47:42Z" name: csr-vx2nm resourceVersion: "6282" uid: a2e0026f-facb-483b-8696-609a32c68477 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7d1d4b4267b3cdf30e0f9c650ca8b231a2ddf6fcc967cab3f261fd47d2a9c033 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T15:47:41Z" lastUpdateTime: "2026-07-02T15:47:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved