--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T20:37:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T20:37:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T20:37:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T20:37:45Z" name: csr-klzp6 resourceVersion: "6046" uid: 5648391f-7d46-4836-9938-bcc29f9f76c3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d6c4f255b8888ee18595ce0f2c98eb8f5337430ac70281aae1e1d25dc67c16a8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T20:37:45Z" lastUpdateTime: "2026-07-10T20:37:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved