--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T09:50:26Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T09:50:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T09:50:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T09:50:26Z" name: csr-rmpbf resourceVersion: "6094" uid: e1bb6de8-a1d9-43c2-8fbd-13b3871df2b2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5fd39cd8eb37ef9d7ef953f44a02f882fd042d096316095105ece09712916c48 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T09:50:26Z" lastUpdateTime: "2026-07-27T09:50:26Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved