--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T00:23:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T00:23:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-23T00:23:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-23T00:23:16Z" name: csr-zqjhq resourceVersion: "5833" uid: fb1bcb66-c1f1-424c-bea8-f4321536fa7e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f07330425cbafab923b7a2abed1c622e998bb0acc5ad698e2adf779bc00a11aa groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T00:23:16Z" lastUpdateTime: "2026-07-23T00:23:16Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved