--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T20:19:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T20:19:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T20:19:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T20:19:15Z" name: csr-r276c resourceVersion: "6075" uid: b9e02f95-6556-4559-ac0d-f4ad29eb4e2c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=9c1fba2ecb2c78a4fedd6a45d8a6d533d51096d2dd0f0adcd4f4538a7681ec7b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQU9kR0ppMUVIQ2dXSlBaYlVhS05xbFl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RXpNakF4TkRFMVdoY05Namd3TnpFeU1qQXhOREUxV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRJek15NWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFRWkljYmI2ZzZ6alVrTwpJKzZ1Slp4S0pRNnEvYmlDYzdhYllwcnc5VDdBSnc3RzVJc3FHc1pmb0ErMlArWHNJM1d6alR5TGNKbzJCbTlRCnAyQVJjSG9rbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUk1REhYUVh1UDFNUlZyRGVFS0RFaktoWEE3YwpsVWdPSE5CVmNQZFkvME1xVjZCMmpiRVRpV0pIc3cxUTN2eUtaazVPN2d0VkFwVmVsV3U4Rm1WemRBd3dEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUIwMFVENUx3cCt0NTU5bEhqVXhtbVdjMlRtaEJZQnFnQ3ZKODdtbC80VDIKUUYwdHNueHlKUVV6ck1xbElvWXNpdEpMeWNJNDNNcTJsWFhnUHN4L3lZYnpqR1h6U0VZMTd1aUZKZ1B1WEZYZwpkd1RwK3d4V0hJY3VncEVFZWIvM1EwOWlVRGRWOWFxWGFRV3hibTFYNlA5eVFhUUhhUFRaMjZuU0VHdUtOcnpkCk9jc2IwQzhZeFhTOVc2cEZZZEZqd3lrM3Q2RGFYcXdzQkpSdVNHQXZzdUFqR1J0RnNGNUJXMmZ1WU5tK21zRTkKcCtvd2s2RU9HM0NjWGdsNWtEQTY5R3RXVFo0RFVrckc0Rkp3Sm1BMXViYTZENkpvbUxJYmVQUjROQTdIU21uVgo4djZyV0pLWmYwSCtmSWlJaWV5SkNxdHZuTVZWOXhqcS9zZ0tUdWxyaVJJPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-13T20:19:15Z" lastUpdateTime: "2026-07-13T20:19:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved