--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T21:35:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T21:35:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T21:35:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T21:35:35Z" name: csr-wstkc resourceVersion: "5415" uid: 24b1fe53-7eb2-4c42-9253-4f4e694093e6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cf4fd86bcc8821e81d01b578ffa3aa45eb9c9cbb980db65facf4035ac4a0b0e5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5VENDQWJHZ0F3SUJBZ0lRWjEzZDZJbGxqVVdMVFpLcDVwb3NFREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFd016QXlNVE13TXpWYUZ3MHlPREV3TWpreU1UTXdNelZhTUZneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFL01EMEdBMVVFQXhNMmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekV0TVRrNExuVnoKTFdWaGMzUXRNaTVqYjIxd2RYUmxMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRApRZ0FFZElMcHFKY2o2dkw2M1JTMjRLSjgxelJtUHRTQmF0d3ZPMGI4T3N4MzJvL1FWUnAwd05kR3BHNlNxOVMxCnU4am55b29oRUIrRGhkZVFoQmo4RTg5NzY2T0JnekNCZ0RBT0JnTlZIUThCQWY4RUJBTUNCNEF3RXdZRFZSMGwKQkF3d0NnWUlLd1lCQlFVSEF3SXdEQVlEVlIwVEFRSC9CQUl3QURCTEJnTlZIU01FUkRCQ2dFQWhOd21FeTNsTQpnTHFKNUtnd3VBMU5YcFRzT2t4cWs0UmZrWHdqczVIWndPaVdnaEF5aWxuTytpT3JVSlE3WTJJaEl6YjhUR3BsCmJieW5sRzFVck81Qk1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQkFRQlJaVStDQ3hWd2RHL1JHaCs5UUVqNE9EQmEKbnYzc0E2ZXJWUm56bnZQRGpZanJrMUNrdjdWRStCTHlsTnpDbEJtMEZZNVAreXpSUE9JSHRlUTlzdkdFcS9FTwpLMXZPbUxWbWQ5cjVSM0tnZXJpRnYwRm9URU8vMGFucFYvWkJXZ1RSSVJCZDlPb0lXbytQRi80djJRL1JRNWUwCkRCUlpHN0hhUHcwdEhtRXUzR1dkaURrdXFVaWhLN2kvMXNrRUJzUkZxWi9DMUhkN0JmdVQyWnpyYXYwc3U5a1oKRkJUbVpHeXpwU3ppR0RmTWhLV3YyUzhHbUJXU0M1MUxSWEdYUURldHEyUlVwSjRXN044QVM5eXNlUTdBQUNsVQptb1FGMkJ1djBPeHBUUzFucmRuTDh6NzJhdVg5blBJTHEzYTJlakRoajM3V3FFQUU1THVDRkNlbk4vbzIKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-10-30T21:35:35Z" lastUpdateTime: "2026-10-30T21:35:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved