--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T18:45:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T18:45:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T18:45:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T18:45:15Z" name: csr-6txzl resourceVersion: "5841" uid: 3b2344a6-4eb4-44f8-9da0-9c047eb9f29b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1a69d20d042cb67dff67d26ce1144ccb5a3ebc690b8a06d7b31721315c671bf6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T18:45:15Z" lastUpdateTime: "2026-07-09T18:45:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved