--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T14:32:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T14:32:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T14:32:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T14:32:03Z" name: csr-xjmv6 resourceVersion: "5391" uid: fa7ced8f-902b-4e91-9703-25c3ecabf9c0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=85fdda46e1b8d6bcbcef5e4560bf20e54d6536d900b17ddce071f244cf78e023 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T14:32:03Z" lastUpdateTime: "2026-07-24T14:32:03Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved