--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-04T20:40:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-04T20:40:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-04T20:40:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-04T20:40:53Z" name: csr-cg56l resourceVersion: "5868" uid: 162fe37c-2ad5-41e9-8c41-1d9371a9e39b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=504585d315b4f1653d3abded5803b95a1c60a506ee09bb2f6d66d87dc368d10e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-08-04T20:40:53Z" lastUpdateTime: "2026-08-04T20:40:53Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved