--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-04T22:21:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-04T22:21:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-04T22:21:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-04T22:21:03Z" name: csr-7kh8d resourceVersion: "6378" uid: a00c6e0a-73db-438a-bf6c-912d318ee869 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fdbb63a2b06416e044197acad1f879eb77e2f204dbcf21a6a1397551a3d62251 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-08-04T22:21:03Z" lastUpdateTime: "2026-08-04T22:21:03Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved