--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T04:58:37Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T04:58:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T04:58:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T04:58:37Z" name: csr-blpp2 resourceVersion: "6067" uid: 195c017b-5c0a-432e-9ccf-3eafe6758058 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=70c45434490e49a130433d788571dc3f0f0806a2b64bf8d619e0ff51c9f58fbe groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T04:58:37Z" lastUpdateTime: "2026-07-15T04:58:37Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved