--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T21:36:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T21:36:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T21:36:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T21:36:15Z" name: csr-gj6ns resourceVersion: "6206" uid: afcdb595-8cff-428c-825a-cdc0d41e938c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=43807762aaf630da111acc8745829a0396552f8883aa34869cdb3145925a558a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-31T21:36:15Z" lastUpdateTime: "2026-07-31T21:36:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved