--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T11:34:58Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T11:34:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T11:34:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T11:34:58Z" name: csr-4fjsl resourceVersion: "5861" uid: fe408b1d-1b2b-4099-ab4c-75549bb0a5db spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c63e0373febdde2f0f88743217bdaf4c453269ce45716ca77101b56c8b5a1a59 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T11:34:58Z" lastUpdateTime: "2026-07-28T11:34:58Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved