--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T20:47:44Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T20:47:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T20:47:44Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T20:47:44Z" name: csr-h48xw resourceVersion: "5791" uid: 716e6e84-d46a-4212-a5a0-12b7efda0040 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=54a0aa2d057e834a3873edc961f972765aa3f32261c5a362515a763810d84748 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T20:47:44Z" lastUpdateTime: "2026-07-15T20:47:44Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved