--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T17:30:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T17:30:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T17:30:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T17:30:18Z" name: csr-7l4xt resourceVersion: "5685" uid: 0aaec270-8b35-49f7-a55c-1df3f3de6e35 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=74118c311e22a161d86df449b1d21fedf6f497bd0bbfb13028bdaf364fbec246 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUozaVJGNS9TSk95M3NZSG14OTVxR0l3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTJNVGN5TlRFNFdoY05Namd3TnpBMU1UY3lOVEU0V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRJeE1TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFUWWdNS2kxWDBrZElrOApteGF0TmJQSUhkcnJ4cmE4dmRFQTl1T3VDM2ZBNWRzMmRaZHh3cUxZZWdtNmxQalc1QXVnbmlaZ0FONTBSMVU4CjZ0cHhvek0xbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUURnYlJTc0dmaHBSQ1NBb0hHRlJIb1lrUEgwYgpIM2o4V2g4b1NEanZtWXYyYTFHZ0N5ZjV5aFBUNHAzZzJKcDMyenhyNXdhN2tpZUlJVm5UNkQ2b3ZJQXdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUQvWmxHY2VXb0NFaCtDdDVQL0ZYalFLVEtiUFRKVVhrT1FDcXpKcnRDczAKamJnMnR4NnMvOWJUQ0h5eEUxNkUydmx0ZXhmek9nZ20xQmU1MEdPYjdpV0V4RWZoVnNXV3FhQURYK3o4V3VpRQpib1dheitLeVhjSkRkUVJzKzA3Q211Mi9MR3M5UGhjZFk4Q1FQT2tOMTY3U2E3WkNIV0RpVGFVRkszblpqMjlSCld6bTh6a01RQnAxVHRjb0VrNUR4TlNYWmpIQWUwWmYxT09Hc0ExemFvczdBdUpqQ1VKRTFyU0NpK0c3WHpsS3cKSG1JMGM3czk4dnlCTUF4VmgrajZQUTEydU01dmMwSjg1c1AvMDYvdHBLNEFiOE13NVN1WURRajhqNTQyNS80dApHVWlxZkhPV3FBTTN2b0FZL0VmVGZUUVZQUk1TS1R3aGtrNzZjUUdia2drPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-06T17:30:18Z" lastUpdateTime: "2026-07-06T17:30:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved