--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T12:03:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T12:03:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T12:03:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T12:03:07Z" name: csr-4hc46 resourceVersion: "6541" uid: a3d2e63a-3dcb-4527-ab91-62d5cd0b3a7d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5228ec512625badbc667e82beeb308add0dba9dd684e70fc177eb55d48f8ce3a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1VENDQWFHZ0F3SUJBZ0lRQk5XY0FQU1hGY1c2VFgxVTVSS3BBekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qZ3hNVFU0TURkYUZ3MHlPREEzTWpjeE1UVTRNRGRhTUVneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFdk1DMEdBMVVFQXhNbWMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNelF0T0M1bFl6SXUKYVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVJTQ3lEU3loY2dnbENJc25NTgpFNlhWSnlBak8wU3Q1TDllQ0dnd1plek42cEV0UG9NVzMvZ3RFRWpJU09KYnBKQUlTYmt4RVQvVDh1Mmc1RWJ5CjBCUFVvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFqQU0KQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRSzZkcU1YQUF4RVU2anhzdUdRL1FKS2J4QXNTOE9uQwowajR3MnYxRE5uZEx1aHVWSm1zUXpTYm1hb0FieStCNHBFTG9sMkd1bjJvWFVyQkZ5MnZhOEtnd0RRWUpLb1pJCmh2Y05BUUVMQlFBRGdnRUJBSzhBWEVwdjBxaDh1d2RXMzdQMDBDVDM4eDg4WStOd25UdFBNc0VhRjZZaTVBNkQKMU9ISUI0eExBa3pMaXU4MktIdGtlaENhYnBGd1F3ZkRzZ0pndkZTYko0MDZUTUlwZ2g3YmtqK0FqcW0wV2NCZApJdDFGYnFWb3VsU09MRmVZZ0hoemhnUS9QRFhYc0gzN2dHUGpSNXdGeXd6QkRNSHJjdysyb0FxVTFFWVQzdkpwCllVbGJMVGRBZ3BZdXk2cXg4clRZTGFTZlU3UnMwclJteGI3Um1xMG9xQjdaSnVpV3hoZEVNalp4TzlIVDk2WHgKRlZyQUpOcitqM2dUU29jYkNiRXNxMzBZaXlrcU5ta3dPN0Z1cWx1MHRtMWV6ejIzeFJYZk40eU53M0pudUc2VwpDNEorK0FPRHUwU0lxaGdkNFBIQ2hiaG5Qc3VkVllqdjNKWHZ4ekE9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-28T12:03:07Z" lastUpdateTime: "2026-07-28T12:03:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved