--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T12:25:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T12:25:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-03T12:25:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-03T12:25:14Z" name: csr-w7vp5 resourceVersion: "5272" uid: b9090dec-cdbb-43ef-8d8a-ff87c33cba74 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=951bbb7cdcc51f0da948ef8e9ef6e5785740615ab936bde6fb9a6ed5fedd311c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5VENDQWJHZ0F3SUJBZ0lRSzNFNksvcHhoTUZzbGROWFVZR0d6ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFeE1ETXhNakl3TVRSYUZ3MHlPREV4TURJeE1qSXdNVFJhTUZneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFL01EMEdBMVVFQXhNMmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREV0TVRrMExuVnoKTFhkbGMzUXRNaTVqYjIxd2RYUmxMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRApRZ0FFVFdsU05hTmg1TjZOLzZSVHFqUnZTVldVVXFlWmxaNW84cW9mMHNFL3EvYXVCTGVSR1pMM0tWSFhBRmtpCm5LRTN5K0NMcURVZzZsdU1xUDZtMmh4cWRxT0JnekNCZ0RBT0JnTlZIUThCQWY4RUJBTUNCNEF3RXdZRFZSMGwKQkF3d0NnWUlLd1lCQlFVSEF3SXdEQVlEVlIwVEFRSC9CQUl3QURCTEJnTlZIU01FUkRCQ2dFQlUrVGpVOVdTVwo1Y2Z5dXdKMkRwL1RrL2RMWmpYT0xFUUx4RzdrTXlKVUtrUXd0QVMwYWQ1MEQ1YnpQZ0Q2RGtWeDFCUUN2RHQ0CnZmbXoxd0hZVklDRk1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQkFRQ3lEeFFBOWI1ZkRIUzVMRDJqT0d2cE9IN2wKQXd5Vm5iS2ZzNWFhSCtNUS8rQktMNnVySW9oOVpEL0hGOXlPUHo2U0dTRlBlMm9rQ3JjUFY2S1daRm8yTGpqagpJTnBIRThUMVdFdURrS3h1a3UrMTI4cUMvdjlQenRpM01pS0txa0ZhcW9lTk4rVld6bDdiSDFQZEIzT043MytXCnZ5aSs3STc2RkZSRkJuT1F4THd4VnZYU3VYQ2Y4dXN1UlA2ZXNlNjRYQk9RY1hQQ2ZxTGYyamorREthbkxsYi8KWXlXUnhNdE5ldkVZN3l0NXZmZUE4ZWJQa3I4MlJabi9CemkwcTVrY3dlVmRaWEw4MUtWeVJuY2xNazhBd09odwpRbUMwekk3MWhTL3FNZ04wUzdrOXRENGJIZlBjUFVlYXg1ZXpMWUNCK0h2SXYzQTBFbXpFYlpzb2pWbXAKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-11-03T12:25:14Z" lastUpdateTime: "2026-11-03T12:25:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved