--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T18:17:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T18:17:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-12T18:17:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-12T18:17:02Z" name: csr-c8gmz resourceVersion: "5913" uid: 78b98094-9dab-4652-acd5-ac9bcd4f70db spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=171e9caeed6b24388128f4fa932059c9930d405c6cd31651eb7ab75eee75cd67 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-12T18:17:02Z" lastUpdateTime: "2026-07-12T18:17:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved