--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-03T09:43:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-03T09:43:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-03T09:43:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-03T09:43:16Z" name: csr-whjzq resourceVersion: "5778" uid: 73d18748-420a-453f-bac9-fbeec209e10b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=74e5c21245efbdbbd919df2652626f2e45f5bfde365a2da565d200e1ca7a2a4c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-03T09:43:16Z" lastUpdateTime: "2026-07-03T09:43:16Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved