--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-05T16:31:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-05T16:31:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-05T16:31:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-05T16:31:45Z" name: csr-jtxks resourceVersion: "5927" uid: fd9f1863-235c-4938-85e7-9edeefedf174 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fb7f790c4ed8f5bb26292d9976d4690614a31127767c6870b35b7320343ce626 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-08-05T16:31:45Z" lastUpdateTime: "2026-08-05T16:31:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved