--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-04T05:26:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-04T05:26:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-04T05:26:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-04T05:26:32Z" name: csr-nsltp resourceVersion: "5066" uid: ce3ea220-962d-4c45-8ac3-256dbb546648 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=99a89994cb3dd216ceb6532dccfac7edd5321b49fac27c6964b78c4f4e9d4b50 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkVqQ0J1Z0lCQURCWU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14UHpBOUJnTlZCQU1UTm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRFNE5TNTFjeTEzWlhOMExUSXVZMjl0Y0hWMFpTNXBiblJsCmNtNWhiREJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCQWxiZVJPRHdlbXZhRG1YU1B2TUYwZVUKa3BSZE5rZUJLYWpnRWc3bzZPM2ZqRWw2NE92UjRwb2hXMDl5cVNmWldyRlppVGp2ZmlyWnNSY1FNVk84d1A2ZwpBREFLQmdncWhrak9QUVFEQWdOSEFEQkVBaUFuQlZSRUxiT01TNWZMSmlXN0JEb0Q1cHY1THZUazh6a2ZTYloxCmJubXkzUUlnWlRZZXl2RHVHc3ZCcDQ1UFNjbzdhY3RFOHlZOEFQcFZya2tnckpPYUc2QT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-04T05:26:32Z" lastUpdateTime: "2026-11-04T05:26:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved