--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T19:17:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T19:17:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T19:17:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T19:17:50Z" name: csr-fcsq9 resourceVersion: "5960" uid: 03598ab4-cff9-42e1-a4b4-e418e17a64fc spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d163d52d52190ad1e7da05c91bceabcf939b13b30b9ebc81c6d8d79ae64bd1db groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRSUd4VnJKL2pvUmZUT2FxRzM1am5qVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UTXhPVEV5TlRCYUZ3MHlPREEzTVRJeE9URXlOVEJhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREF0TVRjNExtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQksyREpGMkNyR0RXSUpyYwpBam9KbWVIcmJBQ1lLUk8rQjdHaFRaWGFRa0dFTXBtOTEyRUk1RXUxMlE1QjFYbUVpdzMwbkFBb05aRXVMYWVmClRwbU1oNW1qZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBRVRUbUxRV0M3YmV3OWtwaHdpc3N0TklFcnBMVwpIUWlZS2JvRkthYm5VV244UnpUalNJeWxaWFMrUzhEV3NOdkpObnpsQ2RXTHhLN1RQcnpxczVhWXZ6QU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBWm9YZHJ5UzR3VXpkcEFIWHREcmpnd3VvQWNZRzZVaU1EamsvWEQ1S0Y0N2kKMHExV2NZa2tZaXdlTWtyUUhCQW8zV2pSSklnejNhSzJqa1Jsd2JNOTJOa3NpT2RzKzBTdWViN1hxMWgxUDlEdQpZK0tnVmdSSFNaY2NvQmFYbDVKWnVmWEUyNTg4ZFhqR2Zwbk1VY0FQckRnM01lOEVJL1BycHZpQVFYQXNkQy9WCmN3L2hlaUJKOG9ZdUFUM0xiWVMycGxFUkFvY2xLTlZCUkNiOS9reWZSQ1FZa2RsTWlrTnBLWFh1aFM1ZzFCY0wKS1FyeUFyYXVRWnYrdjNsYnNzWStTTi9OVGVkalloRHErNDhmcDN3bEZIUGJ0RDFWMlM0bEIxTms3ZXpTVkdZNwo4b3AwRjZTdEF3Y0V4UGF0a3ZwWVc3dlFKLzBSUE1uUDVkb21jZnpmOWc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-13T19:17:50Z" lastUpdateTime: "2026-07-13T19:17:50Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved