--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T16:56:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T16:56:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T16:56:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T16:56:28Z" name: csr-snsnn resourceVersion: "6400" uid: fad1e7ea-20ec-4a51-ace3-c9d43e06672a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f79293662161dc912ace39e185c7e924308d71d219701ff8129f49e88eb6b518 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T16:56:28Z" lastUpdateTime: "2026-07-08T16:56:28Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved