--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T14:18:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T14:18:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T14:18:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T14:18:31Z" name: csr-szrw4 resourceVersion: "6185" uid: 09598b7e-be1b-439a-ad23-771c2c370fff spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d6c362f118cfd8b60fbc82badbaa75aacf28b1d35c56f5d764b8e0b34f421f39 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T14:18:31Z" lastUpdateTime: "2026-07-24T14:18:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved