--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T14:21:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T14:21:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T14:21:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T14:21:11Z" name: csr-qsrts resourceVersion: "6370" uid: 64abf6cb-6b61-48d2-b3bd-0e2d63b8c9d2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cf693caac2a44df1180672b198402df9d9bb22dca9180542e4d51e0ed22ee94e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T14:21:11Z" lastUpdateTime: "2026-07-13T14:21:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved