--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-28T18:00:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-28T18:00:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-28T18:00:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-28T18:00:10Z" name: csr-t6kxp resourceVersion: "6160" uid: bed24a90-33e0-4995-9f61-c1f6b3f05346 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=891db409910834e21199167ad5ff969ca5738ee68264785202307ad27d69a169 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkF6Q0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRNeUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkFTS0YzQ1FPenhwV3RwbnI5ZDlFdWVyYUdZMnZFYUY1YTBFN2lmQzd3MFQKdHA3V0wyVUtGbUUvbGRFMEgxOE1GNStRc0E4eEFlZlpzMWE3Qm5NMXBJR2dBREFLQmdncWhrak9QUVFEQWdOSApBREJFQWlCRDlrdUJJckNyRUZ1UjgrSlFDMWtqbE5KNEJPRTdCZkprNHJ6VDBibkFaZ0lnSmJhalNVbzJEYWprCkZrdEJ2bXE5TTMveWdJck1nYjk2NXZwcmhHV3dmbGs9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-28T18:00:10Z" lastUpdateTime: "2026-07-28T18:00:10Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved