--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T23:35:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T23:35:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T23:35:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T23:35:55Z" name: csr-td226 resourceVersion: "6045" uid: ee009e9e-d461-48c4-826e-43ed4fcc36a7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=5b0623aba6d826dee8f6546af7dc5c7ca4dad041af88b629011f218feb574448 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkF6Q0JxZ0lCQURCSU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14THpBdEJnTlZCQU1USm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRNdVpXTXlMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDCkFRWUlLb1pJemowREFRY0RRZ0FFekpmeUtqa1dNdXhicDRSZlVzWmZVSkVPQ0daOFg0M3Y0MVhlQmozOFYvVkQKNkRGazcwVEQ3bHpNRTZXYXgyMURMYk5RVHBNUmUxaW5VSXg5aXgvRSthQUFNQW9HQ0NxR1NNNDlCQU1DQTBnQQpNRVVDSUFqQWJpc0VGcFFrcG5vc0w3UGNTMFgxVSswcUJjWEwvQUpocVJiK1hITklBaUVBbWFTNHhpcFJqQm9JClFmb2FRZUdZQWJBVThNbkxZMmFyUHRxZWZyRXFZdG89Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T23:35:55Z" lastUpdateTime: "2026-07-15T23:35:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved