--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T15:48:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T15:48:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-23T15:48:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-23T15:48:32Z" name: csr-2jfkg resourceVersion: "6111" uid: 6371c7b5-5e62-42d8-a3fd-552d896ff7d8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=70de847a5aebf00aea7bdd17651b4b349faa7d1a2b3ff72ba7f799b564b2dd73 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T15:48:32Z" lastUpdateTime: "2026-07-23T15:48:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved