--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T22:46:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T22:46:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T22:46:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T22:46:11Z" name: csr-j89dg resourceVersion: "5886" uid: fe0a16e1-815b-44c6-90ba-fb420edac3d0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b7b8d20b49dc010d39aec11a6e5a2eaf30f6d96589304992e3fa32741e43e079 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T22:46:11Z" lastUpdateTime: "2026-07-06T22:46:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved