---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-10-31T22:49:01Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-10-31T22:49:01Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-10-31T22:49:01Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: machine-approver
    operation: Update
    subresource: approval
    time: "2026-10-31T22:49:01Z"
  name: csr-q7pfw
  resourceVersion: "4945"
  uid: bc67e326-0f7c-4694-b1ad-fc1f7ade2e77
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=980cd99f036448307ed709bf596769a694b45e51c4a2490f37bae8c58a70f370
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-machine-config-operator
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client-kubelet
  usages:
  - digital signature
  - client auth
  username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5VENDQWJHZ0F3SUJBZ0lRUWVtSFdza1I4TWlwamM1b1UyQlZ6ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFd016RXlNalEwTURGYUZ3MHlPREV3TXpBeU1qUTBNREZhTUZneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFL01EMEdBMVVFQXhNMmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNelV0TVRZekxuVnoKTFdWaGMzUXRNaTVqYjIxd2RYUmxMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRApRZ0FFa2F4ek5oenp0UnBQK2RGbTlaTkVPRUE3VG1zcVlvQzlsMjNXWXBnSnV1U3JrNG9jWWYyWHk4dDNiNmRPCi9yQjhQUFRxSWpBUGJhR2tCYkRwMUZZdGZhT0JnekNCZ0RBT0JnTlZIUThCQWY4RUJBTUNCNEF3RXdZRFZSMGwKQkF3d0NnWUlLd1lCQlFVSEF3SXdEQVlEVlIwVEFRSC9CQUl3QURCTEJnTlZIU01FUkRCQ2dFQVdIaEN3MVFUYQpHa3ZISnl3ZWRwQThqRkpJSlhwQlBnbjJ3Q09VdlF3K3ExL1pWZXAwNVRBTXhFUytMRWdQNFBGWDY4dUpwZWpHCk52cGJMMnVvcW5NaE1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQkFRQTVLdGY4QUZIeWtOaTdCeHV4VDZDaXVhczgKcGw5dGkrQ2lVclNSVlZPbnhXR1BNdlU1MU1VN1VpWFZlWTAvK251b21EcldSQVhGRnRlK0RONm1tbDdMYUdHKworbFJ3bUNTQ3VLeFZvSnpKOGNFZmFvT1RmczVoMjFqVEVaN3NsME9SQW5WR2JsMG8yaFVqZjlkNmhqWTdYcGk5CndlWFRZVlJmMllaKzQvcUowU0hmVFlVNERtT2NxUStpNnZ6VHBob3pCenI0U1lNcXJvVFVYWkZlK1ZYaFNRaEQKb0c4a1NTWmhZTGU2Z2tSRzMrSm1yU0Erd1o0UUpDU2c0RThqRkYwMTg1MEZEc1hpN2xiZlc5TnJTeEM2YllJWApaOE9GMG5CNVRpdE5YbVdscnRBNVJNWURUQmJyU09xeVZaT3o1a0Fud0lkSGdPMUx2S2RKQUNFRFNPaCsKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo=
  conditions:
  - lastTransitionTime: "2026-10-31T22:49:01Z"
    lastUpdateTime: "2026-10-31T22:49:01Z"
    message: This CSR was approved by the Node CSR Approver (cluster-machine-approver)
    reason: NodeCSRApprove
    status: "True"
    type: Approved