--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-12T18:30:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-12T18:30:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-12T18:30:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-12T18:30:53Z" name: csr-xq6ht resourceVersion: "6341" uid: 56b82640-df39-474f-a614-65203e393137 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2ed66e39cbc02b75a27427c3be79f69c8dc7c40d865db696a0e1d96592a44af6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-12T18:30:53Z" lastUpdateTime: "2026-06-12T18:30:53Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved