--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-30T15:56:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-30T15:56:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-30T15:56:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-30T15:56:25Z" name: csr-b426k resourceVersion: "5737" uid: 4e91902b-262d-47cc-a370-7e7bf07655f5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5baae5b3ed54a69900fe5bc14bb83d86473cde2e078ac9f998d61f425ff883fd groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-30T15:56:25Z" lastUpdateTime: "2026-07-30T15:56:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved