--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T11:25:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T11:25:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-26T11:25:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-26T11:25:04Z" name: csr-6j6wg resourceVersion: "6157" uid: 1ae79036-e423-48ce-b098-ecdcdbf954b1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=467d5b44a7fdf53fe9d89f1637dc2ee0a8632463fbb5af1b17c17f1c733e834b groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRFeU5TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRZGsxS1dzYTU2a2VnMGhtdWZlSE5WSllpUnRCNGd0a0d5YTdTL1N2NHYKbS9jZWtYOG9sYlpKTkUzTHVoTXVrK1BXYXZvWjR1aWh4UkZPTTdxWnd1L1NvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ05EeTJZRlo0WlcxRGdsMVNhR0tROExJNkVUWWFjTWdJWTJ0OFVLMmZ1N0lDSVFDR1hXRk1NN0JDCkkxRGI5MzNIWnJvUnM4VmtCVXJUdTVCRGNUVFV0Ylh6aXc9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T11:25:04Z" lastUpdateTime: "2026-05-26T11:25:04Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved