--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T03:00:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T03:00:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T03:00:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T03:00:59Z" name: csr-fvwws resourceVersion: "6586" uid: 9baa8f3f-cf26-4d4f-81cb-6f3644f873d8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1a7f5bae0715cd4e02ddb59c25f745272171c81cb0b7cc7fda6386dbc64ebb11 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRWi9ZTEN0eXh6YituRTd6TjlnL0ZXakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1URXdNalUxTlRsYUZ3MHlPREE1TVRBd01qVTFOVGxhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNamd0TVRVMExtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk9JNno2N0FEeHBUSVRGYgpEeDFEdkZjZ0NxWnR0dno1TXZpYy9zYytsUFlUUlNTYUp2bStyRzQ4b2ROZ2MvekwwNUxqa0o0VEdKbUc3ZXVNCmV3SXJOaktqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBaFp3eWZWRjUxN1N6OTM5MWI1RjNTY3pOUzNaWAo2QklnRnF6TnlMS2dKblJ2Qk5Qd0wzZWE5WmFSblJ0OGg5WGcrYmNZb2UzbDdnbjVBSDVXMEV5cGpUQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBSW8vQTFJb3lBeG0wU09GVS9CU1ZpQ0NnV2hZY1pTNjMwbDdRSzJZa3NZT2IKNmxnSzArazhEVGd0U3NvYjdKeWk1eUJTWjJCY0pRK0pCNS9LaUY0YlljUXdZc3dqZ2RFbDVocWIraUpSbk90WgppZ0hFOXJsOGpYUHZGVjByK3c0WkVMZ2w4SUpPQy9ZYlBydGNpVGpYVXp0Z1JwZzl2ZGdvWjROY1hUNUVCdldoCnY2RUwzcWpaUTFZQlQ0WUZ0Yi9pVEZveitFa1B1RGRBQWRmWEo0TnVKeW5QVm1kSnhKRjVaOWFNcVBqYnY4Y0YKQ0grV1pIUkI0QlVKZ1JQT2V1UTZxRWdVUkJrTTN5b1BSb0wzOEtyVUxjNGpublk2TmVjOTZWekRDOUpxa01sNQp1TnBNS2U3RGFlWDd2dDBZYnhweDlZWmhTZm0wRE5EY3h6OVhFREpDQnc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-11T03:00:59Z" lastUpdateTime: "2026-09-11T03:00:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved