--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T22:56:52Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T22:56:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T22:56:52Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T22:56:52Z" name: csr-w7wzn resourceVersion: "5565" uid: d04222bf-c6d4-4205-98de-fdd7e137c724 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=97eb3d7cdf2e587e30027f1faa88af15dfab8f702ef80d20e48c83eb3a1fd781 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T22:56:52Z" lastUpdateTime: "2026-07-14T22:56:52Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved