--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T19:50:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T19:50:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T19:50:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T19:50:17Z" name: csr-t94nc resourceVersion: "5903" uid: f8a0068f-af6e-4f7f-a3c3-83a8a73b4f39 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fdf5e138862936f1cf4e646542256b2cd874989d261191df12a2d8b5d5b40729 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T19:50:17Z" lastUpdateTime: "2026-07-06T19:50:17Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved