--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T19:09:16Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T19:09:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T19:09:16Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T19:09:16Z" name: csr-4q4vf resourceVersion: "5881" uid: 41567038-941c-4c1a-a053-96edea0e83bd spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f2ff34700fc2e87251f566248521eba5dbaeb2018d8dec393446dabce67613a5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T19:09:16Z" lastUpdateTime: "2026-07-07T19:09:16Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved