--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T00:07:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T00:07:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-26T00:07:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-26T00:07:41Z" name: csr-hwdr9 resourceVersion: "6005" uid: e79f77e4-3053-4ca5-862a-14fb6439fa3f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4c521e7945a128327166eeeeb59db1975b69dd7bb5acd3a443ee4976eaad8d20 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE14TFRFMk5TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRclU5UEc3Q2EzYmVCSGJDZUtZRC9NKzduWmZFMWJKTGVwa2hTakNSR1EKUnZSOU53cnh0SFhkaEZLWFNNT0dwTlR3NjJ6NGt2eWpodUUwTHQyVW9YTHJvQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ2ZWWkozaFdKTzl1eXloRG9Oelpwdi9JbjlxaWhsclpOVExYaVA2MWVRNUVDSUZyam9TV25hbFZiClpVajU0VFNwdGhaU0pmT2MrOHl5bTU5Y2MrbFFaTzgrCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T00:07:41Z" lastUpdateTime: "2026-05-26T00:07:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved