--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T19:06:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T19:06:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T19:06:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T19:06:24Z" name: csr-42lj6 resourceVersion: "6047" uid: 104d5a7f-2172-423d-a0b4-318c5d4acb5e spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5b9b4eb2f0634818efc080092736297482e80555dc5f5fad648e03df95f86cac groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE14TFRJek1pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSTDZ1ZlN5SVVKblhVbGpwTHNmcURCZEJUVENvQkFWTHJBdE5vSkE2aG0KWVZlU1crZWFpSWRmTEI2dWlXdTdPbmpWVEQwYi96RkRZYmEyMm1lU1ovYmFvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ0J2cml0SDhwa1l3ZDRtdG9JM3JQYXkxbmZEeTVmY2twQXFISXhIVGZpRW9DSVFDRXdBSGhsWGZsCklYWWF0MSt4WDBnb0hkeUQrQTJGTGRObGtzNTZYMEs5Z3c9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T19:06:24Z" lastUpdateTime: "2026-09-17T19:06:24Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved