--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T19:37:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T19:37:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T19:37:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T19:37:56Z" name: csr-hgtjp resourceVersion: "6005" uid: ee534ad5-2936-4e4a-a6d7-dad479c13df7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5ae676254822455e79d896bad3e94de812cb76bbbb65dca27a3d99d3eb3d975b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T19:37:56Z" lastUpdateTime: "2026-07-14T19:37:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved