--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T16:36:39Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T16:36:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T16:36:39Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T16:36:39Z" name: csr-65cm2 resourceVersion: "6076" uid: 905761ae-1e86-4571-835c-1973c67f9623 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=106d2a6562bb704be0b8c96302092da18646059e3b3fde9641e2def0e547f05e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T16:36:39Z" lastUpdateTime: "2026-07-27T16:36:39Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved