--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T17:22:25Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T17:22:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T17:22:25Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T17:22:25Z" name: csr-lwb97 resourceVersion: "5574" uid: e2a6c18c-e5c2-4469-a96c-0ee77b4182e0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=22be7e549053586bcac01b37becc8a3ae1aa87e598a163db270ea84fa0ea115b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUxwM3E4dktpUHQxUGZFNU82Z000MnN3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STRNVGN4TnpJMVdoY05Namd3TnpJM01UY3hOekkxV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRJME9TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFUMmJtemFsd3hsUVJuMAphTUVKUTEvenVJdGtPbEczaTg2bU5veUt2SnNpMUxWcG5semFTVmtUNlZDMTZCbWRJNHZnR3VZUEFkU0dHQURrCmxTRElhbFR3bzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUhqZEFSMjA2OFdaV29WUXM1QTJWNmczend0TApsSkUzUktkb0k2SWhpeXd3Sm1TaWRHMjhVQ05STVBDSkIrcVkzOFBsWWlUVTJoMGk4RnY4bXdaMXZyMHdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUQwdVpod3lLWUhVK204ZWJ1N3cvUkF4dk5Ja3V1eGFXK2JHNmE5MEV0VWIKTzA5ck9zMWtkbm5vT2tWd2I1VG5lUEpvMXhXYUVLNUtBWWJXNDVYRnZCcFpldWtpdXhUUUZJRXRLY0NsTHg3dAp2cHJTdEh3cnZ6NlpQdjJaQmRpZWt2TmYxRzQ2WjNTY25Hc3E5d0RnY3NCN3U4U3pQNFFSSmE1aXd5aElFNUhrClRLdFFHdzF4eW40TFhadzc5Zi90bHRDWlltQXkxOVdQdDFPOWNSYUF0enlSRm9wOXRNTUd5eGZHajRSdVo0Rm8KdTB5cUlmTVhiMlBSUllZTU5DTEExb2huSjhUUWltWFNpRmpYT3MxYzd5WUhab3dyRjZIcHVUQlBrZU5LUjJ1SQpZeGhGbFZkQjhJZCtmWGJCd283U3QwTnlLanJYK0kwait2a1JFSGovUXJJPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-28T17:22:25Z" lastUpdateTime: "2026-07-28T17:22:25Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved