--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T18:33:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T18:33:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T18:33:56Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T18:33:56Z" name: csr-fkhqw resourceVersion: "6165" uid: abda0665-0a30-4e37-9768-4c8ca3bbefbb spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=15214fedbaf6beaed2353db03d3c5f62e5c9e6ea13461cca2da4dd11f25f62b8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRFNE5pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRY3d4TkV0eGhkRVBNVTdLNGdKZzJFTytuZG9mZmhMeFQzRTJUWDVhVjcKbVNsK0lUSk5jUWRQN3AxWjlMbk9tU3o5REZBbWhFV3ZrOCtFaWtBZnMrUnRvQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ0pTaml6Mk5oaDN0bE9UTmxMMzllRzF4ck84ZUlRMloyKzA4VWtDamhsckVDSURrWmRwYVVPaTEvClBETXJmckxLU25FTVdrMWk5YXVxQUUyM2k3dGozdlZrCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-29T18:33:56Z" lastUpdateTime: "2026-07-29T18:33:56Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved