--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T19:53:48Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T19:53:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-11T19:53:48Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-11T19:53:48Z" name: csr-vwn8w resourceVersion: "6293" uid: fd5737d4-12d5-4872-89a3-19fe377c48b9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=89f374fd781e037c36d38da9c263934f136c74aec0d736d3fb3af2bdd6a665c0 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkF6Q0JxZ0lCQURCSU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14THpBdEJnTlZCQU1USm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRZdVpXTXlMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDCkFRWUlLb1pJemowREFRY0RRZ0FFNk93WFFiTlZwanpmbnNaVWVUeEJNSGhuZVp5cER3bkE3Nys0bm5xNEc1bHUKUzdyVks4UUdFNlo4aW1rL0lYYVJ5NDZsNHVuYUdoU3VXVVNjWDk0UTJxQUFNQW9HQ0NxR1NNNDlCQU1DQTBnQQpNRVVDSVFDaVZmeTM0U2lDclhRYjJ4QiswdW1sY1VRc01rWkRhTGFZL2xaQkdtT3cvZ0lnV1pSWG1Ta1NyVjFXCjFuL01sNHB2TjRaNC9oRDVJR1NhRW5LT3Y4V0ZKWFU9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-11T19:53:48Z" lastUpdateTime: "2026-06-11T19:53:48Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved