--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T17:14:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T17:14:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-21T17:14:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-21T17:14:21Z" name: csr-wkpfz resourceVersion: "5912" uid: f44f457f-1283-41bf-9343-689e7a991cd7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4289330247859984fd6fde0448e1494d9a96882352d3070476928ba58454a067 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T17:14:21Z" lastUpdateTime: "2026-07-21T17:14:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved