--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T23:48:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T23:48:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T23:48:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T23:48:40Z" name: csr-xslp8 resourceVersion: "5569" uid: 1304db30-99d5-42dc-913f-4c17f0e6cf15 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5a412222f0d127b47a839201ac463257392b0f618a9294b7d07e4ea042fdfd04 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T23:48:40Z" lastUpdateTime: "2026-07-06T23:48:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved