--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T22:27:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T22:27:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T22:27:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T22:27:30Z" name: csr-ppz2q resourceVersion: "6044" uid: 2bd8e74f-63c0-474e-88d6-acdf127c7f13 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=bcedeec464cec27f62b330bceb8dc8fb2d773763cae2e8ff9f43eddfd9aa9a86 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-06T22:27:30Z" lastUpdateTime: "2026-07-06T22:27:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved