--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T21:15:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T21:15:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T21:15:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T21:15:39Z" name: csr-7zln9 resourceVersion: "5919" uid: 259ce378-3922-469f-9ac7-cfabd979486d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cc4be40e1dbde69b44801ac32dd6b278c178d1da33875fcfbaa2c889838399f1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T21:15:39Z" lastUpdateTime: "2026-07-08T21:15:39Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved