--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T18:44:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T18:44:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T18:44:05Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T18:44:05Z" name: csr-vxpqz resourceVersion: "6247" uid: 4afb9038-c096-4853-b476-88cb74fe7418 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=43bbda7ef43c4dc0d9949ee87c35a3a41171fca92c5ba7fec02522278120e179 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T18:44:05Z" lastUpdateTime: "2026-07-24T18:44:05Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved