--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T09:00:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T09:00:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T09:00:26Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T09:00:26Z" name: csr-fvtlj resourceVersion: "5957" uid: b080960d-e031-4b93-9807-85f23bc85d6b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b1a55c7878333eecb00fb4ee37c17d9687e7c0fb2512c97b9cdcc10d3fcab683 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-24T09:00:26Z" lastUpdateTime: "2026-07-24T09:00:26Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved