--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T13:50:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T13:50:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T13:50:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T13:50:25Z" name: csr-7xf8x resourceVersion: "6358" uid: fe237ebf-10db-4081-837f-f845c8110277 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=336a137c55d309a88798d45bbcb19a5b28de613ba4aaf40fe465626b1557d83f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T13:50:25Z" lastUpdateTime: "2026-07-10T13:50:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved