--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T13:58:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T13:58:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T13:58:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T13:58:21Z" name: csr-qbs2d resourceVersion: "5919" uid: 59281abf-d222-4763-bc2b-f5b8d38d8b5f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1379add72825cd44e5b63e12e447cf1873357c372b53bcb78a62abbdfd5e125e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T13:58:21Z" lastUpdateTime: "2026-07-09T13:58:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved