--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T04:39:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T04:39:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T04:39:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T04:39:53Z" name: csr-l498g resourceVersion: "5998" uid: 799ef159-0359-4d09-869b-e36e705bb9c3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=75a5c03b40b4539dd45349480d22505e8d4c669352273614a55f562923b49e36 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T04:39:53Z" lastUpdateTime: "2026-07-20T04:39:53Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved