--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-23T16:35:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-23T16:35:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-23T16:35:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-23T16:35:14Z" name: csr-w48mw resourceVersion: "5355" uid: d5827988-e33e-492d-9b88-ebd7a8cb484e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3a1df106d2d1519ad6da05a5b3390e356a143b84140295b252fc09d15174d1dc groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRFNU9DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRQ216dExRZVk4MUlpWWw5M3N4QXBwWDVPWXljUWQ5MXJjTUhZV3ZvL2wKaS9MM2hMR29iNFJCY0ZRREhlcVA0aWp4T0Nlc0JqQXJwYUlya3JuaWVDSXZvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ1BYZTI5MEVpYWZUb2kxUUo4V3gvWVlaVEhuckdVdmlHbmlzaVVLU1R5VjRDSVFDc3VlR0VBUHVVCnAxZ0tVeEVsVjIwZFpJOTYrMnNoOUZsdGNUbm5kZmFTd2c9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-04-23T16:35:14Z" lastUpdateTime: "2026-04-23T16:35:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved