--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T19:56:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T19:56:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T19:56:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T19:56:25Z" name: csr-bnwgz resourceVersion: "6154" uid: 114f6ed5-1944-4f30-9b10-1303b8c78dc1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0c0b3efb076ddb0ca246bb6d15b0a65f6ebfe2149e9a79cadd91eb2bded72954 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T19:56:25Z" lastUpdateTime: "2026-07-20T19:56:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved