--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-19T04:13:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-19T04:13:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-19T04:13:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-19T04:13:41Z" name: csr-wt6kk resourceVersion: "5995" uid: a95aba60-4ad6-4302-bbb7-1696f7e11439 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3806661df3f3ff3f6c5bf98a23437c231185a318ddfa5f8f72e8f4ebcc810a9d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRJeE5TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSQldqbmtXYzd6dWUyWW9nZFQybU5ycXQvaFhaRUcrOVl5d3hRTm0wdlQKVFhieEVIOFFnM2psTjk4QzlzN285dml0QlUzQ3hwbmtOU3pabnJTUEt5cW5vQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ0xmakUwaTMwdkZjVlYwMUo3cjhnckFqKzQ4TXR3WGVpRXQxVUJNL09wOUlDSUdGT2Y2NFU0ZnVzClBaVkdNem5JZkxpZTlERFFDSXYxY1c1TUZXOGlCVkpCCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-19T04:13:41Z" lastUpdateTime: "2026-09-19T04:13:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved