--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T14:56:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T14:56:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T14:56:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T14:56:55Z" name: csr-ctnwv resourceVersion: "5809" uid: 06a0ab74-f130-4051-b6e9-d401ef25a414 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9ff51598413be981ddcfd55fb6ec1ef2aa05203969e5a517273f0a27419f0338 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJqQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE00TFRJME1TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUSDRocytjTDV4b2Fla0hNaVc3dVFpb2tGSUFSbEo3dlo1NDdxdnVvVmYKVit4L2ExOXhUNXIzWjdtSXhzVnpNM2hhWHhLcjZnekQ0TEY1c2hTenRtTHZvQUF3Q2dZSUtvWkl6ajBFQXdJRApTUUF3UmdJaEFORkpsT1IxbUkxU3FTYW1sUzRwRTI0YzEycmIzSzRMc3REUzloQnRHeGRCQWlFQXhYSW9iamV3ClgrL1hSZDhDR1grL0pSTTFSb0ptOG1YVlU0cTlJbVN5dm0wPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T14:56:55Z" lastUpdateTime: "2026-07-07T14:56:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved