--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T15:09:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T15:09:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-12T15:09:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-12T15:09:42Z" name: csr-jbnfh resourceVersion: "5831" uid: 3486938c-73cb-4f6f-aef4-c2c6cf1a9e77 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f20c197d2c2112d6b19047e6aaf8f4da1b5361dcff8dfbd0bc3ca1187c41e5e4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-12T15:09:42Z" lastUpdateTime: "2026-07-12T15:09:42Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved