--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T16:50:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T16:50:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T16:50:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T16:50:41Z" name: csr-cl26q resourceVersion: "5828" uid: 060d4b0f-ebf9-45ab-80b1-c0bf6d140ed3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3b0df1a09087ca868297e4820bd65e58b89e248223d711dfc5021d9b0b0ce50e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T16:50:41Z" lastUpdateTime: "2026-07-09T16:50:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved