--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T19:51:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T19:51:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T19:51:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T19:51:29Z" name: csr-p8l2m resourceVersion: "5810" uid: c37507cd-7ab2-4363-ae10-d01fc7c04eeb spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0b17756de4471d95ef215a5ffbd9a4764f69999a34b652f5a8e424da6f6ffd74 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T19:51:29Z" lastUpdateTime: "2026-07-14T19:51:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved