--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T12:29:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T12:29:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T12:29:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T12:29:54Z" name: csr-4b6tm resourceVersion: "5511" uid: 6f37ead0-9747-41ce-a1f7-0587ca9ab780 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8fe06223f60c411ef60f7432e3e6da27c9003006e99575df35001298e85830c4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJqQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0xTFRJMU1DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSbGNwcmwxeC8vVzFWTDlCdFIrejBmc052ZjgzdS9QTzNlV1B3T1NmS3IKOGwrYzNVbTIzM1FCRFBiTHlhaWQvQkRQamc0dE9vWmlZQml1L0JsRXlDSDRvQUF3Q2dZSUtvWkl6ajBFQXdJRApTUUF3UmdJaEFPTVV6eDgyR0VnWEJ5ZlExUElTV1JITzhMdWpjOWo2VXZ2bUppUDhLSUJaQWlFQThKOVdVby9GCjR0QXBXZWloaTNOVkh0ZC9wdHptZmM0M2ljTUhZbFFoK01BPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-10T12:29:54Z" lastUpdateTime: "2026-09-10T12:29:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved