--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-04-20T20:11:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-04-20T20:11:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-04-20T20:11:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-04-20T20:11:24Z" name: csr-rg7sf resourceVersion: "5774" uid: 01292178-f54d-4ffb-8a2c-cee29adc6a82 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=34f1a9ee7d3f9457bb5ce7485f4a7923840a42433f926c761b93459385ea141d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRJME55NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTNEdpN0l1NGtNRjlDYldmS0wwSnhkMXYwYW9JZytGeTk5K3FTZzRqa2MKTkJrc01LaWNYeHpzR3pJcENjSHI2a2E5MG5HSkRaV0pnVFBPd0pIUXN0OGJvQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ2FkM3FVN3NEc0UxcjdCZnR6Z1dOanE0bGd0MGFBbWNoVkxObVBuV1VDV0FDSUJNNlYzV2lyWEd3CnVKQzlveTNuTDhrZEE1TVFMb3QrWTRmOEkydS8ySWN4Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-04-20T20:11:24Z" lastUpdateTime: "2026-04-20T20:11:24Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved