--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T14:18:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T14:18:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T14:18:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T14:18:34Z" name: csr-dlncm resourceVersion: "6404" uid: 6144364c-33ac-4ecb-a698-d72df18a9f47 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d6c362f118cfd8b60fbc82badbaa75aacf28b1d35c56f5d764b8e0b34f421f39 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T14:18:34Z" lastUpdateTime: "2026-07-24T14:18:34Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved