--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-18T11:49:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-18T11:49:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-18T11:49:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-18T11:49:07Z" name: csr-4mf92 resourceVersion: "6362" uid: 70a8d8ce-6c0c-484d-b6e2-befe718bcdb2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f200b021a2d00208c3a0a39d4be0821370c5f68e3a296d543acbfc8f236d1558 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRFM01pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTaVNhRXhCMnZiSVZkL3FxVXphRjJsUlVjUmJnRmF4TnA1NnhOYWdoZUcKWXZkWnZJT2pNVytGLzJscVFrRzdGQzFzc0xXZ3lJcmo5QlphRGU0R1kvOG5vQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJaEFPbWRZSlozMlZCQTNQQ2lnMzNrVWd2dy96eEFKSElBTjdMaW5qaUtEWlZmQWlBL3kySkhSalN0CmU1T3lTY3haSWk1K2k0MExVdGVVSVlNbDUrR1JJdmRCdUE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-18T11:49:07Z" lastUpdateTime: "2026-07-18T11:49:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved