--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T19:23:13Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T19:23:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T19:23:13Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T19:23:13Z" name: csr-v6cdx resourceVersion: "5800" uid: c3a9a8dd-2db5-4c74-a95f-85b725f9d02f spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7c709980909faa5f4bc67502544a50b496f936fd162546dd0ba0088391f674b1 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQU5zSVRselhHQmFBSEx1VHdUY05obGt3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QXhNVGt4T0RFeldoY05Namd3TmpNd01Ua3hPREV6V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE00TFRJMU1pNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFTM1lsQUZ5RWN5WEhHdwpxTVJvUk9nSldkMDBOR3JWMWVVL0dvRlVBaDhVSTFzNHdsQXA2RE9tUUJVQ0s5blRQTVJQdytDcXpDcnEzNHl6CjREYy9NRVI2bzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUJRT2lQV3ZISVVlWmcwY3ZaWGtLUlQyMk05dQpTenhsS1BjSVIwaG5XMm8yYVoxTVlPbnRkQnNlQWJFTmljdm9GMytUU3RiY0tpTXVGZWZmQnlRMXc4UXdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUI0ZjNJSFZQbUNLY1ZZM0hWYlJUeG5PS1RURHZjVzBmeXExRTByS3RsSFoKcmMzcnIzZTk4eStGSXFKdmRTOCtoS3ZTKzVUckx4aDBONm1OWnQzMEZiRXluZGNyT00rY1BFWjF1emwzQnlJQgpsTnBiemFkWGlIR2oxb3RUUUtHUTdaS1VMUkgvdnJ1MEtTb0x6WENqZ1pHbGtCYVNSUVFvajlYSGtPaElrTmE3ClFNWDJCamhRMitpUldlcmc2SnFhK3YrR0QyeTJZTU5tazJkVUloMlUxSXZMMStqNVI4MEZpMnZsckdZaVowS1YKdUVZUVR5TTNZMHM3dWFzWHJ2UnNZbXFVSVhFOVBqbFhMSmYvUm9KY3dmazBUZG05NWNlTlBuMG93TTFWUDV6OQp2ZnkxN1ppaFpUZEtnUjhKSFQwbU41ZVp5ZFI1NmRTakxYV0hGNW1SMWdrPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-01T19:23:13Z" lastUpdateTime: "2026-07-01T19:23:13Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved