--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T12:53:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T12:53:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T12:53:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T12:53:04Z" name: csr-f756l resourceVersion: "6103" uid: 2fd544c4-ac15-49c7-95f0-e62a634d2e92 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9f413f88b8578a10607f9726bb159a63a63a4ca344478488f27035ce4d486652 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T12:53:04Z" lastUpdateTime: "2026-07-24T12:53:04Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved