--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T20:59:09Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T20:59:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T20:59:09Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T20:59:09Z" name: csr-btr9k resourceVersion: "5739" uid: e1bc8b16-fb82-4aaf-9533-902884aba95e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cc45bf10383ee5e34b1bd4d50107c40c494c2323889e497af0087ba1e2eb14ce groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T20:59:09Z" lastUpdateTime: "2026-07-15T20:59:09Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved