--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T20:46:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T20:46:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T20:46:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T20:46:55Z" name: csr-g4xzl resourceVersion: "6878" uid: 67cde489-3a52-4ff9-a3a0-0e3168e7ad94 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a3b5a2797f8baa41c2d097e300f24b97a7970085ac26139912c846cbae91485d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRFMU1DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUOVhqd1dpTGErb3BrNVk0VGJFWExPQzdMK1R6RFkyWEo3aWphTnUzY0kKdUZIUy9OdXlDZzdRcDExcnF4TXltMmxhSXVDa0trbElocGplZEE4RGo3MVFvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJaEFJSm5WS1FsRnRXTS96OW45QjFKNTlsRTdDNHVjUHR6QTFDNFkxbUpHRk5OQWlCNEdEeitvQWV0CnFVRnZtY1E4WkVIQXRXNnczYTJmeGd6S1h4T3VaR0xwcEE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQU5iSTBYWVlIMkVJZmdrWm96a0JLd013RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QXhNakEwTVRVMVdoY05Namd3TmpNd01qQTBNVFUxV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRFMU1DNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFUOVhqd1dpTGErb3BrNQpZNFRiRVhMT0M3TCtUekRZMlhKN2lqYU51M2NJdUZIUy9OdXlDZzdRcDExcnF4TXltMmxhSXVDa0trbElocGplCmRBOERqNzFRbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUdNaGx2eUV3SGlCRDc3TEhGNlhoN00zK2RkVQovbktoQ2FxNnZPalUwOC9KRHp4Q3ZXSE5SUFhjQStSUFJGaHU4M1JoM0FUVHZMMlFjQnN6eUx0anYwRXdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUg2REh1VVd2ZTVBdmN0MitxUFVGZ1NKM1llUnJHekZNa2lYbHB2TUtVNjkKY25STHc2RnZvRXpZVFNHbGRwS3ZXRElnc1JCNk9ialR5Mnl3dUk2VFVwT2ZCYllzRHJIYTBTblgwNWRuWWNZQwp4WUNVeHFORWtKaU9lSHBSdUp1UGthV0kzVlp6VHFOUnpybGRibFpHY1dCSjllMFdpRmdpeURrU21vK28zU2pGCkZFdldLY0NDRjJVdER1OXRnN3NyMDZkYVp1YTlrZlJzZE1zR1ErKy9TNWRkV0tZbkVjdjh5RHIrVzFaWTJ5L2gKNVVnQUtWd01Gbks0WjdUUjRoQmd5ZzdFZkgwNUZvbm1MZzkwckhzQVdOU0U2aDJEcDZXN3E3VTFaRTZuOUEzUApTQis3a3Q1OERKRlpkcTNRdDNXOTN6TkhDY0NhbmdWM2VBWDkzRzM2eWRNPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-01T20:46:55Z" lastUpdateTime: "2026-07-01T20:46:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved