--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T17:32:47Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T17:32:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T17:32:47Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T17:32:47Z" name: csr-4t9z7 resourceVersion: "5492" uid: 08d702c1-237d-4c4f-a523-ed4856fa9c95 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cd09048ea641e003de3d9f30023e12f0b89120f5b2f1f53714abdcbeac8ea171 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T17:32:47Z" lastUpdateTime: "2026-07-16T17:32:47Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved