--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T18:44:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T18:44:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-23T18:44:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-23T18:44:43Z" name: csr-klfgb resourceVersion: "6011" uid: 48f9fba9-82fa-46a3-a17d-a33aa7a501ed spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9e4f66a87846a48bc62e7aee8eb6fc5d9113e6ca2393b4bbee0303a878d24a1e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T18:44:43Z" lastUpdateTime: "2026-07-23T18:44:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved