--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-26T15:18:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-26T15:18:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-26T15:18:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-26T15:18:36Z" name: csr-8rp8z resourceVersion: "6561" uid: 9e99d578-521f-4dc9-8061-a058064786e3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ddaaf8afaf147f62e206ee1307cf5bd1f40449750c528e3b3580e76d313eb5c2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE01TFRFeE1DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTR1NLZEhtN0lFQ0hEa2pCdTdKdXExeW00YUJMWjdwZUhrSTh6Sk1HdXMKNEN3SWVpeTFKQURGRUJkYXkwMWE2TkI2V1I3WVlibkJmajNuSHF1T3ByZDZvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ0QxYUdHeUJpL3lKckN6UHdMZHB6aCs4NEhkcFp3cm5zRnlGNXVwaW9UcDhDSVFDZjg4TFZpMDBuCjVzNW03U0NaY01WTm9hN1VYSjVySFNzNU4xY2FxOGlLbGc9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRQ3gwU1ErNFl5c3VqRy9rc2FNSjNqREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qWXhOVEV6TXpaYUZ3MHlPREEzTWpVeE5URXpNelphTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemt0TVRFd0xtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQklaSXAwZWJzZ1FJY09TTQpHN3NtNnJYS2Job0V0bnVsNGVRanpNa3dhNnpnTEFoNkxMVWtBTVVRRjFyTFRWcm8wSHBaSHRoaHVjRitQZWNlCnE0Nm10M3FqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBWWUwNk5reWlpdEVlalY3WnQwdnBORmRva1VCagpKZDV5UUJFUXRZTno4cDFGaGdIcjV5RFlUOHpuaTJZTmE5ZzFvRTAvRGlNQUk1TXdYbis1b1Z0VjV6QU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBQjRYNmlRNWh6VTkwSUw5dXRNaWxnZW9uRXFIWGFQQ0ZIeE1sZzhzVHhYSlIKUVIvWncyOXJRUXc4MmdjZWhqWDN0THRrZzlUb0NocHZyam1ycnlha29adzJ4MHpPZmJmekxERWRnTjAvYmhMSAorcHhML1JlNnJJTS9GMmtWWTVPbXhKKzU3OW1vNkpqa0hSTllpcFBUN1JZSmNFTUREZW9kTDBxWkZOSkVCUXFNClNUSjRvbW9FZGU2c2NLQ0pFTFFEblp2SWZVSW5wWG9xTTNRNmF6V1NFc2VRQjB4T0wrZGZ3SE9PM0VGTVZQUVAKTlNpYzFiUnNub3dUcU0xYlQ2VGJmMnlCZ2lLcGtCRlBZOVRHKzZiTlBzWkFKYXpPTncybWN6RzhqZDRPS0cvQwpMMEtvS1pZbWJiZ0JLOHFXNXUzK2lIR3UyL3Qzc25QaVE2enNsakFkOHc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-26T15:18:36Z" lastUpdateTime: "2026-07-26T15:18:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved