--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T19:26:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T19:26:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-03T19:26:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-03T19:26:21Z" name: csr-x2nl6 resourceVersion: "4702" uid: c7ffe2b2-58f7-4454-8d7c-242043f184e0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=09bcdef145a7d7ab0174523b45ad5acad7ef03998cfb5200688733579a2c29ab groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkVqQ0J1Z0lCQURCWU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14UHpBOUJnTlZCQU1UTm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRFM055NTFjeTFsWVhOMExUSXVZMjl0Y0hWMFpTNXBiblJsCmNtNWhiREJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCTmdBWDVhZjZOSm9BbU1vc1NBMlU3RnYKUmtlNHlLMlFzZVFPZGpCb01Qc0xBMkFDZkNSb0ZmVWVmbzhjNnR3citPbXhFR3NsNUFIWmJkR1FueWpJd2Z1ZwpBREFLQmdncWhrak9QUVFEQWdOSEFEQkVBaUFlTjR2dWtoQW80VlBtcGxBZXdMMlpVNWpRSmFqMjNvQmErck5TCng0ajB2QUlnUWZKZHZDTGpIVm9jZHRqSXY5RmQ3TGdvOUtTd1NNUEU1Zm44ZFp3Y1Fraz0KLS0tLS1FTkQgQ0VSVElGSUNBVEUgUkVRVUVTVC0tLS0tCg== signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-03T19:26:21Z" lastUpdateTime: "2026-11-03T19:26:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved