--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-17T17:49:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-17T17:49:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-17T17:49:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-17T17:49:19Z" name: csr-jxcbw resourceVersion: "6237" uid: 05b4850e-6939-4582-8134-f221f193d78c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=66710b5c51adcd885d57eb8fbf6bdb10babfe338495e9084e997dee5e27300ae groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRJek15NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFURjJqcTdRYzFmZlZ5V1BTbHAxcVVjb0hNejdqenZEa3pDR0hnR2RFUWUKL2JZR3Nqc0JJNjRvUVJ2aytOZDZPWU1hajlrcWUxYVhJZ3ozMi9ROUhpVGlvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ2N1RXV1UHhleGJ6ZmdLdExrYThpM0pscEV5QnowSm1lTUUrMmY3VUdXUHNDSVFDYytmcFVEcUtiCk10S2ljdUFqNDNESkRUY3FnSWpuNVdwSE9iWWU0Y0xONVE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-17T17:49:19Z" lastUpdateTime: "2026-07-17T17:49:19Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved