--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T14:20:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T14:20:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T14:20:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T14:20:36Z" name: csr-jln8r resourceVersion: "5933" uid: 256e2f69-06c1-46f2-9cf5-1a62a4ae3f94 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7064099a6b219c25e5b084768a4fb6e2183bb570beb5fa58d65bd7b6d196d3bf groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T14:20:36Z" lastUpdateTime: "2026-07-09T14:20:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved