--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T13:13:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T13:13:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T13:13:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T13:13:25Z" name: csr-5v9s4 resourceVersion: "5563" uid: 4515245b-3291-4bb9-b18d-c5d191489714 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=48c054b45c25c8042f591a3e0c35c18adb29d0d4309bd037d3f4791c7bcfaea6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T13:13:25Z" lastUpdateTime: "2026-07-07T13:13:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved