--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T19:50:56Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T19:50:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T19:50:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T19:50:56Z" name: csr-f7sxl resourceVersion: "5995" uid: f105dad3-6e12-4803-8cf1-d40802f083cc spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=383a542a3a0cb8427a68c5b75e5d68fe4530a77a595b5dbd4e98664e2f05a618 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T19:50:56Z" lastUpdateTime: "2026-07-02T19:50:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved