--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T01:44:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T01:44:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-22T01:44:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-22T01:44:48Z" name: csr-b8q9f resourceVersion: "5928" uid: b062e85f-448a-498c-aea0-b68d40ba7b70 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=47287e91ab7a121c7098bbc9370eddca72f7118edd4715bf5b4d8907be02e11c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-22T01:44:48Z" lastUpdateTime: "2026-07-22T01:44:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved