--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T16:40:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T16:40:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T16:40:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T16:40:02Z" name: csr-b72sr resourceVersion: "6135" uid: da0a1a7c-7593-4cc1-894e-7274b7f475db spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b1ff0fff46477fc6b3d2110e5b8675cf09f509d390553143d30aaf21dd97f8ee groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T16:40:02Z" lastUpdateTime: "2026-07-13T16:40:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved