--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-08T18:23:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-08T18:23:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-08T18:23:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-08T18:23:45Z" name: csr-m5zj7 resourceVersion: "6384" uid: c9a4701f-526c-4be5-a636-99e8987d7fe8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f008e154fc46a40ffb977005971c8764226947fe8ebedbadeddaab1109e6c1d6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkF6Q0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRnd0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQlA0d1BpalVjbXJqbTFYd055Sjc4WmxUV05URTV2QjQ1eGlXUmRFbVM3M3gKb3JkTEhzeFMzd21FMGIwUjVBRzM4SkUvNVVXZzR0bFFXYjFyNzRFNzdVQ2dBREFLQmdncWhrak9QUVFEQWdOSApBREJFQWlBTDdCNUx0RXF5azAyL0FLYmxtVTY4NTdNblJJd25rREJLMGpnNVlPZ2pxd0lnVi9ZWTF6bkVIUFNOCkFocmxmeWdvSlV6c3ZVb3VyQXZWOUNnTEZBVXI0cGs9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-08T18:23:45Z" lastUpdateTime: "2026-09-08T18:23:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved