--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-13T19:58:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-13T19:58:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-13T19:58:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-13T19:58:24Z" name: csr-hhpmc resourceVersion: "6252" uid: 080fb4f6-b78a-4c95-8aec-8521eee3247a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=801fce25e0e3ae8448bad5d55990dc15a6f3633ae870fac8fa31adb6ad429bfc groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRFME5pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRYSt3ZmpHTU9QWEhXejRjSUlTSjB0aGkwZ21Jbnd4SVAxVUV3ZW55dzAKOS9DY0ZoV2NaTTFiYjVjUGxuWG9USHc0Y0NBRU10Qnl2bEllN2h5cEowTzVvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ1ZEUWRzejQ0ZE9Da0lHK0xGK3ZFREVtalpqN0htY3lrckI2cTM0SldiZUFDSVFDdHpGeC9jYmZGCmlDdDRyUHFGL1o5TlgxYWEzQm41bmdLYUFQWHhmSTMwYmc9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-13T19:58:24Z" lastUpdateTime: "2026-09-13T19:58:24Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved