--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-31T14:47:50Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-31T14:47:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-31T14:47:50Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-31T14:47:50Z" name: csr-896rm resourceVersion: "5539" uid: 0292dc17-7b66-42ed-b9ef-3e3d4f43409e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f25d8fbf43f28cb1cd59e5537473883d9a76d5af6b947b960e2ef9ec65068930 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRVnRObjdtbVYxbHAvajJSTkVpQTFnREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM016RXhORFF5TlRCYUZ3MHlPREEzTXpBeE5EUXlOVEJhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekF0T1RjdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFbGpaWFNFR2txcDlSSDQzYQo4YWR0WmFyVERocEg5cThZNjhRUklNZlV0QlJBR2hBQ0E2UnQwTGNJdHRheEJ4bkZaeGxybzd1S2xWRXNCNXVaCm84czhNYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUN4eHNCcXlyMG5SQmF2cm13YWdBRUhacFZlN1hWUQp0Q2NrQWhFRTZmd1VhZEpZYmt4ai9mSWtsODhOQXFLRWs4Y1FFdDRkTm5peVZCWjlISTBIK0VPM01BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUNDZDN3dk5QUFdhNGY2WWJmY1o5QnNKVUNYRGptZUw3OC9IbjZxQ2ZwRGdUNk8KS0NTZmg4WmppQzNxcWFWaDMzVkFiMTl4MFVMdnVuRVpaajJHc3B0Kzk5Y2ZROG9Mc1BIRm93TTg3ck9EUFQ5Zwo4YTVzRzludjhMTkc4NFo4Qnk3WjlwMVE3NFFLUEtMWE01bENUN29jSUwzblk1eHYzcC9ITVpEL0FFbjdsTjF4CllMZ0s4WllvOXNmaUdmYnYyZDBPTnJPVGQrQlpReVZKQUdBNkdCN3NZZXU0UWNyeXlkU2xRd1oycEJnUWtOZlIKV0E4eTNqR29Jc255WnM4Q05XbTFxTGxQQWkrMHlsSHZaam10MVMxTUpZaGRRZ3U3M2dFYkpLcnE0b3hsR2g1YgpMZWZkeEc2MzVLRTVONS96YlRSWkRUUEEzUjdFN3ZHRVlwaHRJQ0ZYCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-31T14:47:50Z" lastUpdateTime: "2026-07-31T14:47:50Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved