--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-10-30T21:52:29Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-10-30T21:52:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-10-30T21:52:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-10-30T21:52:29Z" name: csr-wmmxm resourceVersion: "5282" uid: 4a8a9de9-6d91-46a5-8f04-2a92c48774a6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b08690140d3b7ab691eea055dd4014556b3d30cdbe87989305396e1c413bab78 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJqQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRFNU1DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTNlp0dG1Rcjl0NXRpRFNMajdyRHl1b3pqNU9DOHl4YTQ3VE8vMGRUU1IKem5lN282UDZPT3pVOUd6UXJKanNEbDJueDNQS2F6aUE0WEpjcytMdzZsYkRvQUF3Q2dZSUtvWkl6ajBFQXdJRApTUUF3UmdJaEFQbGRjbmQ2S05OM0hCUjRybktYaG1QazEzRVFKamJ5SnJ6SkF3eHdCdEVFQWlFQTI0Y0hCNGU5ClhHczV3SmcvVmRHUks3UGYzd2E4SnNtN3JlVEtPaHpSZlpnPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-10-30T21:52:29Z" lastUpdateTime: "2026-10-30T21:52:29Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved