--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T08:46:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T08:46:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T08:46:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T08:46:34Z" name: csr-5l4ct resourceVersion: "5886" uid: f4571dc0-eb9d-4d3e-990d-c412d2590f15 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cf3c33da7f9060151d3182745b64fe814d44cb9f04e03d329cf1243b5436bc3d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQU1SdEhWRlJzR1IyR1JMc1NCWE5aYVV3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URXhNRGcwTVRNMFdoY05Namd3T1RFd01EZzBNVE0wV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRFMk9TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFTUU9oTkR2MnpFV2V0NApoZUZMcStlZC9BLyt1VlBpaTRTSUNvdWZPSkxLZ1JpN01UMzZFYmxtMzdRSm5UZ3c4OHlrRGZNNTVCTlNBakkrCkF4MEo0SysxbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUhKbnlyOE4waEZQaVBaWEdLRGtCVjVhSHRQcApESGFrUFJ5ellHbjJEWVM4MFNIaXEvbTI1R0tLRFRhL21kenowcDg5WHNkQ0xnL1Z6RXViL3ZhSXJ1Y3dEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUU5NW5GcW9VTEdiQ3lZY0VrbkIwZ0lNbkY4UTBJenZsTStGVEFUUzI0L3MKSnlVOHZxY2pIdmg0S2FkRXdLRmtBMGppNUpvM2cyb09zeEtGZys0V2VPV1JXclR0ZFEyZzQzNGJFVHlxSEd6MApZT0JKN3o4T3RoR0Y0ODBGRThxWFNzYy9JR2lrTXNzYStmSmtNZHA1M2E5SVl3dHNwVEV3RHJsYjhpQ0F1T0UxCklWWHpBVWZpYkFGTFhEdU5qWXROTENrdDVGclpaaFdmSThGSzAvSXYwWWovOG1uS0Zqc0JNVlJCUWtMV25XaDcKZXBhVlpiSSszd2VXc0lzRjRkN0Ric3FsUXY0YzQ3MUJQTk85dXJ2WFBVbzdRclFweFNNS2hwc1k5bTBXNlpLSwpWdUtKOXBrckp2Z2crcGo2anZhQy9POHlheGlWRjdlNGxOcnBDbE5rTmNnPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-11T08:46:34Z" lastUpdateTime: "2026-09-11T08:46:34Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved