--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T17:12:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T17:12:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T17:12:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T17:12:31Z" name: csr-l5tp2 resourceVersion: "5816" uid: e699a2ef-c782-4172-8917-ae9bbca00182 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=fb814d8c6b1c062a3f6e2eddf4e379f7154e2259cc6e32ff1b3f8e5f3e736d07 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRFM01TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRejkzSlBRa3U2TVpIOW1rQ2xyZ0IyZjhHZnk0Y05uSzJHVmxBQlAwY0IKWXgwLzFnc3ZUcjRocFpsczNLU3ZTRVJkRUdOS05HVG5PVERWSElhNWdpMW1vQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ1pJMGl6dGh3Y2NtbVlOR1paS0RBb3BRUGJNeWx1a1VYUjRvWFBtK3lsVFlDSUdkV25NdDdZV3R1CklqZ2VHdmR0eUZXVFdqdTlhTW11UVV6c3BVZzhPS3BOCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-01T17:12:31Z" lastUpdateTime: "2026-07-01T17:12:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved