--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T13:07:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T13:07:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-23T13:07:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-23T13:07:43Z" name: csr-f2fc8 resourceVersion: "6593" uid: 38a09f65-f385-4afb-a4a6-9d3a618e2b3c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=21e2af0c43e0fc86a2bcbe0798e7e51df894d65759cf3b98d5448c805b35a0ca groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T13:07:43Z" lastUpdateTime: "2026-07-23T13:07:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved