--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T01:08:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T01:08:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T01:08:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T01:08:04Z" name: csr-pctjt resourceVersion: "6058" uid: 2ca00e1d-3941-4dfe-95fa-7995db644733 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7c2c464c037821ff47634a4d5a48296544c8ccc239c2e0b2b93415c68e8926df groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkF6Q0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRJMUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkVhVStmekR4ckxyck9sVTFBNzM4YWIwS1VJMWVTNCthVUZUTjhHdG9jS1kKSnJLMnRxSmIzZ1Z6QzJoTGJkZzk5UnFlMG1xaTRHTjZ1Smt3YjhkWlFMQ2dBREFLQmdncWhrak9QUVFEQWdOSApBREJFQWlFQTJ6OVRMVk1VNmQwUXBuWFoyTWluTDk5UzNueW5Pb0NQRyt6V3Qvd2UvTE1DSHl4dE5EajV1Q01pCktkcE9hZW5mcTJLb1RyYlMwQVhvQzdNQUNaQjNLREk9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T01:08:04Z" lastUpdateTime: "2026-07-10T01:08:04Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved