--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T03:59:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T03:59:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T03:59:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T03:59:54Z" name: csr-jsmmf resourceVersion: "6066" uid: a1f2b54c-5c6f-4a34-81c8-ec3d2a76805a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2c3db987a4fc08d281ab1399eb4baafddf8370ef30d8750412605f1e324e93cd groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T03:59:54Z" lastUpdateTime: "2026-07-09T03:59:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved