--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T10:52:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T10:52:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T10:52:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T10:52:03Z" name: csr-9x926 resourceVersion: "6397" uid: 707e2237-37ee-4288-b538-e7f2581f6f9d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c6c05475fc1965e259ef0ccab65304794f67962ac3ef00ae97c6971369c239c9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T10:52:03Z" lastUpdateTime: "2026-07-27T10:52:03Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved