--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T00:23:27Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T00:23:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-23T00:23:27Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-23T00:23:27Z" name: csr-flcr5 resourceVersion: "6087" uid: df967f28-0e31-49a0-a25f-92fbd4931aa8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f07330425cbafab923b7a2abed1c622e998bb0acc5ad698e2adf779bc00a11aa groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T00:23:27Z" lastUpdateTime: "2026-07-23T00:23:27Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved