--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T17:34:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T17:34:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T17:34:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T17:34:25Z" name: csr-469mk resourceVersion: "6029" uid: 9ebd3599-647a-4564-91bf-adb2312ffb20 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ad80b91bd8c25dc8a0b0d8f5b792eead88507c13764fb9e2b2f3b77d8f1b1d61 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkF6Q0JxZ0lCQURCSU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14THpBdEJnTlZCQU1USm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRFdVpXTXlMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDCkFRWUlLb1pJemowREFRY0RRZ0FFM1hvUTY4eG5UVDh1RElSMGRmMTBQdGErT1NLdnlpVjYvTkNUcTQrekhoS2oKNFJsdlMwS0NTQWVHLzVVOFpzNUx6WjBpOVhiOHFyQlROZDd3QmlwQjlxQUFNQW9HQ0NxR1NNNDlCQU1DQTBnQQpNRVVDSVFDU01hd3hEWDBnM2gxN0xCc1dYNVBiY2FlNTRCMHpEWUpkRjhWZGordzVhd0lnRVZ6N1Q0RVQyUnBsCkVaUmtuZUVjejRFNWQ4Z3VaOFdZTEdjZWh5em02blU9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1VENDQWFHZ0F3SUJBZ0lRUjBVRHJSenFrVEdkMDltU285SWdoREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM016RXhOekk1TWpWYUZ3MHlPREEzTXpBeE56STVNalZhTUVneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFdk1DMEdBMVVFQXhNbWMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemN0TVM1bFl6SXUKYVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVRkZWhEcnpHZE5QeTRNaEhSMQovWFErMXI0NUlxL0tKWHI4MEpPcmo3TWVFcVBoR1c5TFFvSklCNGIvbFR4bXprdk5uU0wxZHZ5cXNGTTEzdkFHCktrSDJvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFqQU0KQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRRkhPdjZ1MEc0UXFHc244T3l6K0phUFZ4RG5aamo2UApBMzFrS1Bmc0thY3lUdzlwb0lhVDNBdWZmZVdwbXpsQ0JXZS91dzdVVTU5OFI0UE03ZlA3S3dJd0RRWUpLb1pJCmh2Y05BUUVMQlFBRGdnRUJBR3FNTWZrcU5qck5zR0JOQS9uWE5YNm5ockdxelRpVng3ODBoaHV1OWxPTUpNek8KMXBQSzdXMXNpQnJOQnl5TVRHNFE2bWw3U3Y0WWFPaXNIUWYraDVqZXk3cFZGNitJQUJBd2FFYkU5Y3owQWEveQprbm8rUjlLSlVSbk4zQlowdThmL01KWFo5a0pPS0tBcTFmbTN2aGJ0UzE3LzBzMndoV3M3YzNMSnZkVnZNdWV2CnhIbFVpdDlQNVBFRnlIUEpaRXpZeE42ajFlWG9oRlNET1UzMElmeThObWpLQUIvS1p4alRwa1VhUUFkYk84M20KN1pLeWlYdnpzL3gwVDVzRTNncTdDNmhZNkFGNzd0bkliRDlBcXZsQjVYc2RCOTBrQ2t6L1Zla09nZE5rUytscwprUVp2dE4wOExZVjgrT0JTMzNpcWVXd0hVQVFCVVhqQlN0Y25DQ0E9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-31T17:34:25Z" lastUpdateTime: "2026-07-31T17:34:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved