--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-15T02:29:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-15T02:29:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-15T02:29:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-15T02:29:03Z" name: csr-7k857 resourceVersion: "6740" uid: 8f222a2c-7064-42b7-9af1-ddfcfa1403d5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=197f0571a12605f8dd355923482748d42229bb88f28fca392318d41f0cf52df3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-15T02:29:03Z" lastUpdateTime: "2026-06-15T02:29:03Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved