--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-29T22:46:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-29T22:46:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-29T22:46:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-29T22:47:07Z" name: csr-h5f8p resourceVersion: "7339" uid: 7ab6bfd9-626c-4dd0-9c93-21640fe80e9c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2bf6998a9e7aa911c6b02d43154c5d4f6ad76d70f57e1626f693c916004c67ea groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRJME55NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTQmc1RTNJR3ZTUHpPb0ZoSXRtU0hZbG5EZDNETkhVd3R6amZZRXlwWGgKeXhnTG9lV1BXY005SEJQZ2ZXWDBrN1V4d0NvL0FEb1RQUEl6bkJKTnBJTUdvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ0xYREh1M3dlLzA1T0xkbVE5WEthSFMveTNoaDBGR0t5NHB4ekVQRWhNZGdDSVFDUTcvdUJham0rClJ6TlRZQTRhcGZUOW1mRFlHVkZIamNFcDljS2JlcFR1NGc9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRSkhHcEY2OUQrcy9ReTlId3hhbEFjekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qa3lNalF5TURkYUZ3MHlPREEzTWpneU1qUXlNRGRhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekF0TWpRM0xtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQklHRGtUY2dhOUkvTTZnVwpFaTJaSWRpV2NOM2NNMGRUQzNPTjlnVEtsZUhMR0F1aDVZOVp3ejBjRStCOVpmU1R0VEhBS2o4QU9oTTg4ak9jCkVrMmtnd2FqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBVHYvZEVIMWFYY2hPMFphZjNFSE5TV1JmUFd3cQpmSjVLYWRuSUxKMDR0c0t5a2hESVVBOEQ5SUliNnV1REFFUVdMc3RQQk5sMGVXOENvRDNOSER1OHZEQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBd1VndHYrTUtLVFNjeGQvc25rQTFNaWNYUGZIUGk5UkQyRU9sS01mSExqWXYKcmdUK01lSUxjTlJROTdJOUM1dDJsR1BCblZUNXZYbXRhaWRIQVNJMkwzbnNjQ0xVaDZ0RnVHT1p3Q1NRNWFldgo3b05EZ1gySEZWN2h5RFR3aDRYWFhYTFpYcU5XZUpIbHU5d2h5MTgwcVpqV3FLTFh2VHFpWjVFaktyNjQ5N1hHCmt5S0VlMTVyYlB5KzR6ZnlpOG9MNWxjTnhzaEZ0VS9hckgzeUtRM3VHUG8xVkY0NXcrQW5qUTRzM2MxMXFBRksKQ0M1b2Nac3pmRjlGSE1GcEIyeHJhNXF6eVZCNFZPNkl0VTlXc2tRUmZuYXdVUUUrRGlpK1NzYmpjdUIvMGJsUApvZFNKZEwzNExjSm9xZDczdS9hSG9rbTd0dEdRTkRYVVR2RFNHOEN5SFE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-29T22:46:48Z" lastUpdateTime: "2026-07-29T22:46:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved