--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-08T16:56:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-08T16:56:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-08T16:56:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-08T16:56:19Z" name: csr-wwbjr resourceVersion: "5964" uid: 65430aa2-ce9b-42db-8ad6-46cea2973bcd spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f79293662161dc912ace39e185c7e924308d71d219701ff8129f49e88eb6b518 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-08T16:56:19Z" lastUpdateTime: "2026-07-08T16:56:19Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved