--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-25T06:45:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-25T06:45:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-25T06:45:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-25T06:45:45Z" name: csr-jrp26 resourceVersion: "5331" uid: 7d97487a-1e65-49ba-9211-00c5a115c759 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=74861f0f2466b8da71b8604c8e1fdc3fc2622c015baba826c67e924510226c63 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJqQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE01TFRFNE9DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRVTlzc1JjUlRibTI4cGkwQWllK2lBK3pJWUZIcjlRSlMzM3FuZHhvL24KenF2VzZxR0c1N3NKemtmaE43bDBJMk00c3U1UEJSY0RNdXFhVWM3NzVsakNvQUF3Q2dZSUtvWkl6ajBFQXdJRApTUUF3UmdJaEFNc3VBdFo2Z2lXMXdzeTBLNmpKMUhkU1BZNEE4NTRkSkpOL0UvQmNIem5mQWlFQWtKOEgwZjFZClBBOUgrQlRaZEdwZXdpdEROZmcvS0RkOXV0TmRteDRxcmFvPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-25T06:45:45Z" lastUpdateTime: "2026-05-25T06:45:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved