--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-04T15:56:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-04T15:56:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-04T15:56:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-04T15:56:40Z" name: csr-5gxm2 resourceVersion: "6199" uid: 954390b5-c242-41cd-bd40-e689cb00578f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d45034d82f34dfbafc41e56e23035407dade25f5b42aa9fedc0c5e4f08e338a6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-08-04T15:56:40Z" lastUpdateTime: "2026-08-04T15:56:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved