--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-03T13:56:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-03T13:56:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-03T13:56:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-03T13:56:13Z" name: csr-7m562 resourceVersion: "1939" uid: 9fdec9af-8280-4dad-b4f7-9f3e3933a5d3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=86b97c93ddf624b250a044145aa65612efa01de9d3bd59f6381ebdc2b0fbd93b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5akNDQWJLZ0F3SUJBZ0lSQU1wVkl0MlNBdDNHWGZkc2I4Qmd5RTB3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZeE1UQXpNVE0xTVRFeldoY05Namd4TVRBeU1UTTFNVEV6V2pCWU1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeFB6QTlCZ05WQkFNVE5uTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0wTFRFM05pNTEKY3kxM1pYTjBMVEV1WTI5dGNIVjBaUzVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5QWdFR0NDcUdTTTQ5QXdFSApBMElBQlBkd09Vek5yMUhiUTZxR091WTI2SzdBWmpreWJMb2xRVEQ0NjJqNDdmcWpsak95Y09DaFpidUFidjg4CmtmZnhqbERzK2lSWmtZNDJaZlJzSlc4TVd4V2pnWU13Z1lBd0RnWURWUjBQQVFIL0JBUURBZ2VBTUJNR0ExVWQKSlFRTU1Bb0dDQ3NHQVFVRkJ3TUNNQXdHQTFVZEV3RUIvd1FDTUFBd1N3WURWUjBqQkVRd1FvQkF1bFZmNlJ6YQowbVU3TS9jWXYwZ0dhR3k3K0pIWjFzR0FlWmdJMXdrd1doTFdsUmlRUWpramhsanV5dUZOalRscXdzbm5vemd5Cllnck1CL095U1IxMVFUQU5CZ2txaGtpRzl3MEJBUXNGQUFPQ0FRRUFCR0p3RUh0ZmJVVDFYT1hUZVR5d0M0bHoKU2Jtb1c2OXdDK0Y4a1YxNWlYK2MwbCswLzN3azZtVTZUWTFnb0s4emhDdFQycG41MWZVUFNvMWlueGxkVXhaTQpVZzBpZ1E4cDNXd1NMVWxuOWlyRUMxRTVMbUxwWm5nb3RpN2JUZSs5WS9KWmRzVmhaaDk5TzJVUGg5TTgzK21CCnViNGRtbTk5c09RT05rcDArOEljaTRQTFNWRnUwNTJPbHhGOWdCTUtkWVBZcHUwdm00d0pNbkZ3Sm1XN0RVYkQKa3cvNWhvK3pIc3JQdk54RURoaFRmWGs5NXNOY3YrdXRNSEpwcDBjcHpRaVJ0aW1CdTNNaU1zeDBFdS9wQ0dtVApTb2F0b2svR2lWVmh2RFQxc0lTZkRnRms2QzlDVmpTT2ZGRnhXZjJiN3NLUmJRcWFSc0lHUGNQM29Ud0VVZz09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-11-03T13:56:13Z" lastUpdateTime: "2026-11-03T13:56:13Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved