--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T23:07:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T23:07:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T23:07:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T23:07:17Z" name: csr-hsrmf resourceVersion: "6201" uid: 97815480-e25f-4d40-a158-f9068aa85415 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=871d140fe7ee19be34447d0e898303af728ca15efb752cbf70fa9812c347c206 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T23:07:17Z" lastUpdateTime: "2026-07-02T23:07:17Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved