--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T12:35:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T12:35:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T12:35:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T12:35:11Z" name: csr-8dhcf resourceVersion: "5744" uid: 4653cd6d-d7a5-490d-b7d7-310d6d0a9fbb spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2835a73cfcb1e9e93bfa89e0971fc6642ac54d3d7f74aa2d5997dd96016e47c0 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T12:35:11Z" lastUpdateTime: "2026-07-27T12:35:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved