--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T15:08:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T15:08:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T15:08:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T15:08:27Z" name: csr-qtwld resourceVersion: "6014" uid: 5f7e19cc-e525-45cc-8d3c-b77441d59623 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=367f04afdea700c778778bbfbabaabae652812922c597a145319c6cd3d4f12a5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T15:08:27Z" lastUpdateTime: "2026-07-24T15:08:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved