--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-16T11:54:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-16T11:54:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-16T11:54:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-16T11:54:55Z" name: csr-tmbbv resourceVersion: "5930" uid: c1c5d869-7775-410c-a712-134a3dcf3821 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1f670cb85ce4d964319799b543d4b5ed9c5cf14ea3530d7ddc8dbd2157033508 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRVekxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkYzb0NhTzBRVm5SMGdnWjJJYVExWnJJV3Ixc3VjVnF0cXhsZmNneElwM2IKb21MVW8yMkxrbDh3TVl4R2RNc3IzQjJoSG9xK2ErWHpES01kWmlaOWNBaWdBREFLQmdncWhrak9QUVFEQWdOSQpBREJGQWlCRGZQb1pSMG10aVZQeE1SeTNqbkRESXBNNm1MTlNSOWc1U2FXT1dnU0F4UUloQUliTXo4MkpGNzkyCndocG5walEwZjBrQjFycjlYdDBLQ0p4M2NpZVZmbVhOCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-16T11:54:55Z" lastUpdateTime: "2026-09-16T11:54:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved