--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T01:59:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T01:59:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T01:59:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T01:59:40Z" name: csr-sj5dw resourceVersion: "6133" uid: bf78e282-2b84-4ea9-92fd-bd1520e87f3f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=66d29a4d7fad674e3b41451eae2e3e9862f4971a76be1fbbacee0f5ab119e7a1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T01:59:40Z" lastUpdateTime: "2026-07-09T01:59:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved