--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-05T17:12:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-05T17:12:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-05T17:12:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-05T17:12:53Z" name: csr-h88jw resourceVersion: "6068" uid: 5f26c0a4-e55b-4ec9-a4fd-a6b1408b75a2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4ef9ce71d66562b74fdad80b95994920c6b51319e14627ecb1ebc0418bd3030d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lSQUxLb0dpQVJodml3cU9GT0xlaUlDOXd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09EQTFNVGN3TnpVeldoY05Namd3T0RBME1UY3dOelV6V2pCSU1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeEx6QXRCZ05WQkFNVEpuTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0xTFRJdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFUGsvZlBPNm1kdmozcmlrZgpLbElFS0lxWWVWUGZ0UjZXRHNXdW5rWTdXZG02NU1ZNmRpQTFMbHdtcm5wcUhaeEdaVGZ1dEFkazFWTWxzZ3VnCk9XeHNDS09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJYR3V3OGxPa2xrRXNGd21NWnhyUWlVYzROTjJRRgprK3VpWXhYMmZrN1BDamhCQmgwZE1WK0Y4RWlWbHNSK2Q5RkVlTVJtYXhIenl2Y0ExNFZ6S1lYME1BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUJQK2libFNpVVlQbldaNSt4YTljTWc1Ty9SUXpWVC9kSXg0cTl1SkVZTDBVVWoKVCtwZUxwbFNsbnJhWDlrekMvK0ltbEJ6c3l5dUREZG81Q014NEVZUXBSNWRoR0VWSkhwMDFyV0ZlcnZaNG9ZZwpCUXlQMTg3Y2phbDNxRWxESHlveFpPTk0yMHFjcWRyOVNQKzUwTXZSc1l1aDBLT0ZxL29zOVA4R2E0UzNoSDc0ClNqWkwyMllualRpZzhpTVE2UlV0Ym12M0NHS3NSc085bHFxZityQ3M5YTl3V0NBTmdtOGRFQ3F1K0NaaVA3SEwKdEZWRkoxV3VzWWpRV3B6a1FrVU9VdDNjS1NhTUl3RlBUaGZ5T0d2OEJ3NDJqcUlxb2dXS1g0b0Y3NTR3YTgzWgozWUY3RVorOHJjWlkzbTh5bzJZQTNnN1BIN2ZzUTF3emZSUVZXUmhKCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-08-05T17:12:53Z" lastUpdateTime: "2026-08-05T17:12:53Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved