--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T11:45:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T11:45:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-09T11:45:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-09T11:45:21Z" name: csr-tjgdz resourceVersion: "6445" uid: 44572b33-dc31-47fb-b0a0-777808afac97 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=02aa9d2f8838b24b6e122aba0c2ece98145a85f49b8edcd4dad719cbb1292fb7 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T11:45:21Z" lastUpdateTime: "2026-06-09T11:45:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved