--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T04:39:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T04:39:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-23T04:39:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-23T04:39:20Z" name: csr-jmtfx resourceVersion: "6145" uid: 46823a67-023e-46c5-8f0f-60ab115d26d3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6b99c4aed0680482cee9423fe347e2069e6bd2e8d98e0df9c504069f2facd67a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-23T04:39:20Z" lastUpdateTime: "2026-07-23T04:39:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved