--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T21:33:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T21:33:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T21:33:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T21:33:50Z" name: csr-l6fgr resourceVersion: "5978" uid: 843e33f3-6d28-4621-aa3b-7abcf05fcf02 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=26974d4c6db48d194d4063ac4f4116d85d9b985b7703dec1071e2fc6d5f34e1a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T21:33:50Z" lastUpdateTime: "2026-07-27T21:33:50Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved