--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T22:05:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T22:05:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-02T22:05:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-02T22:05:02Z" name: csr-4l5p8 resourceVersion: "5279" uid: 926c284c-9673-470f-bcc6-207e3d6d44b6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=de67a890db2c4ac5ba0eeacb4f5c2f80bbd95e4d18e4805fc867361f045e1393 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkZEQ0J1Z0lCQURCWU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14UHpBOUJnTlZCQU1UTm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRJeU1TNTFjeTEzWlhOMExUSXVZMjl0Y0hWMFpTNXBiblJsCmNtNWhiREJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSEEwSUFCRnVZTk84SStnL0JvMXlsVHF0MDBybU4Kb3BhWUhzaUdmek5RS3QxMFRxSDA4Zm8rQmFzZzU5VEpkdFJQcEhMTmY3RmkrVFE2bkkrRXVMUzVPRFhBc3JhZwpBREFLQmdncWhrak9QUVFEQWdOSkFEQkdBaUVBaHo1aUJKUkdidlhxQWN0MzFuOXNaUi9XV2hMdFpkcVd6aFhKClltZGVicEFDSVFDdS9yREVvcFJ5RHArK2JSVllMSU12eVE1RWc4SzNCaG1xTlprdGRFQUwxUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-11-02T22:05:02Z" lastUpdateTime: "2026-11-02T22:05:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved