--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T15:36:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T15:36:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T15:36:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T15:36:11Z" name: csr-mwz4x resourceVersion: "5724" uid: 994ae6e7-94c3-45b9-86f1-4f4855decfe5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6c07b7da8516f908c33db6ce382205a30698b2e854a992794e281b103c5ea96a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-27T15:36:11Z" lastUpdateTime: "2026-07-27T15:36:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved