--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T16:05:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T16:05:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T16:05:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T16:05:55Z" name: csr-w6hj7 resourceVersion: "6011" uid: 0bedb651-c501-48ed-92b4-da74f19a48f8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=79eb386ef37f042512ceb25404d170b419c9405db6ff91a4c08e7ecf020b46a1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T16:05:55Z" lastUpdateTime: "2026-07-24T16:05:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved