--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T09:29:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T09:29:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T09:29:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T09:29:17Z" name: csr-rnn6q resourceVersion: "5667" uid: f4695758-a5e0-42ea-92f1-2a0306a839f7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a437c9c62e4c4b87562a33f6b951a2ae579e8168522658ba70e84bb8b98b5c71 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lSQUx3SldaV2dDdjVyVFRHa2E3U0FpOVV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URXhNRGt5TkRFM1doY05Namd3T1RFd01Ea3lOREUzV2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE01TFRRekxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkZSRFZzMzZvUDZ3YjJqVgpjUWdzQy9qczEyci9admovMUhDSHltOFA5MCt6c1FXZ0tSL2JpK2dtSXZtSUd0Z1BYSDZNd0luUitjLzk2NG1zClgxMnZKbk9qZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBRndiN1picWJLZnZQRlVVVG53Nm55NHRXeVRPSAp1YTFiMmE1NEdCbVhpL29aUWN3S3pNTks4Q1FneGRNdzRIak9uV1VxNm1qNkljL3h0a3IwM0NuRnl6QU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBUzhsLzNoejB6UHR0OUpRUUROWXBuOExUNUdSUFhkbVFxVWRwVllNbW12Q28KdlZ6b3hJZElDYUw2OC9aS1p4V1RsMTVRa1ZIYlNVWFpvLytXZHExTStwMWFFZXdWOXVJMStnaWVKR2wza1RRVApBRzhXeDUrYlFPQTFML3RWcWhkbmI3MTlFUnF2RHRtMFd1VE5IOXNlSldxd3ZDY0kxQ2R6aUVmR2FRNnd5MytuCi9BWmpScXkzWUJlLy9jOE05ajVyNHplMGlYOTErV0lpT0w0bEliSVdWRjZ6T1Z0YzFzODgwdVA2YkdadTh4RisKbzllZXJDelIvV1BJOE9YMGl4aitqVDdVWERJTHYvTG91SlAxbEJTTHJLM256UUR5SmF3ZGlxcFplT210WmEyeQpZcENuTFZWWG5mTzl3SlQrcWtuS0RIeTdSSWNTKzkxd2pka1RNaGZXQVE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-11T09:29:17Z" lastUpdateTime: "2026-09-11T09:29:17Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved