--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-09T02:59:43Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-09T02:59:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-09T02:59:43Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-09T02:59:43Z" name: csr-f6wdg resourceVersion: "6731" uid: 887a2e46-b788-45aa-a654-9bca480519a0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=c2665be332fa7c9d97ae26788194a7e395dac69366139b5ddb7fcdf43961e711 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0yTFRFM01pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFReFNPbnpBZUhCbktUQndIVk1xQWduV2MxdVduWmdUclJmN3FZMDNlelMKWU92VUdzeUVDdklIOGMyeWd6VjQ4S3NKQXgyUjh6STVoUWFQNFdjTy9TUTJvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ0Y0dnNDM2NEWG43SEcrNkc4bG40Z0FzeVFHTTFZMFdQM1VUOEVYSkV0ZFVDSVFDM2x3YVIzYldJCktxdCtqcXlJQVB6RXltUHBVWXFlbFdJbStVUzUxNlFydlE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-09T02:59:43Z" lastUpdateTime: "2026-06-09T02:59:43Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved