--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-26T15:38:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-26T15:38:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-26T15:38:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-26T15:38:21Z" name: csr-cs2qd resourceVersion: "6353" uid: fe79abb2-4cd3-45cf-9a53-68c626bc4559 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b719de6e42a1348dac4fceaee353983f76757fa1524fc5f6622609781225f673 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-26T15:38:21Z" lastUpdateTime: "2026-07-26T15:38:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved