--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T08:33:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T08:33:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T08:33:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T08:33:21Z" name: csr-jgmqb resourceVersion: "5933" uid: cc989ef6-0f35-449f-8b6d-1f7277f42c4d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ac0acca5963fcab57b3f13796c4054b53cab827dcfe5ce3b7d6c6150dbba5269 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T08:33:21Z" lastUpdateTime: "2026-07-24T08:33:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved