--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T21:58:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T21:58:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T21:58:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T21:58:41Z" name: csr-66h5c resourceVersion: "5854" uid: 48a0198e-fa19-42a1-873c-ce004146026e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f38b5eef8e6924d080ac25a50e52a664c4c2dc829c3a515bf8335a872d6a2fae groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T21:58:41Z" lastUpdateTime: "2026-07-07T21:58:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved