--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T23:56:17Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T23:56:17Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T23:56:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T23:56:18Z" name: csr-tcpb2 resourceVersion: "5943" uid: 4c7f64e0-4257-4675-bb85-e5952f3d0274 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d4a524cd6a7b7b954345459bd25d55bb53aabccfe752b57f428dab9161af9427 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRFeU5TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRQ0dRL2d6VndLaENUNnhkdWpFeEdkaXVzUVJ5cEl1Y2hjR0RkRWFRbnIKc0xnZVdvU3RBUGg4YVBHVVV3Yjdsc3YvQmF0NWRpYnhxc0F5UUZhekRRMVhvQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ0Fhck9iNFdrYnhIRzBIK216d2Y4dm5CR2krS3FpNHEzRzhRclRUUENQallDSUJITVltUG5xT25yCkJFd3BkV1NsL01OTTVMR3IyeXM0Qk1tN09HZnBXeUM1Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQU00VXdpRVBmMDB0NFg0azlDZWl1Z293RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTJNak0xTVRFNFdoY05Namd3TnpBMU1qTTFNVEU0V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRFeU5TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFRQ0dRL2d6VndLaENUNgp4ZHVqRXhHZGl1c1FSeXBJdWNoY0dEZEVhUW5yc0xnZVdvU3RBUGg4YVBHVVV3Yjdsc3YvQmF0NWRpYnhxc0F5ClFGYXpEUTFYbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUpFZVlYeklFVXU3c3A4Ukp6bDBmS2JYanA4egp3K082aFRTYURMZ2lvUjZheGtZc04wWlRySy9XcnZVQTJwYmtNOVVBdzVOZFJQNmZueDBuZkgrTVlpY3dEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUt2TnpQY3g1ZHJHVEE0VlM0V0c2S2lQRElyTkUvQXNoRUxaUlQ5cnkvVVIKYTR4SWYzY25YTUhSOW5xcTNXU2NTZmt3ZjFQdzBPSlBZNmRDNWNkN0U2T1BTWjNZbGZKeXl6NGlzV2NtWlNCcwppUmZZVnBZOUdDbnNHVjdzenBNRnpoQ3NkVFh2RUdad3JqK3JtRjMybjVSZCtWaGloZ21Bb3N0QllvZGVGUjhYClB2UkEvdmVFbXJUNUs2dUt5aDVkRCtZL0thRU9Pa3Rlc3UvWE5EZ2MvTU1Wc3hmcFhuVFNsL1B0dFYwV3ErSnoKbDBRS29ScndRQ1Y0TUcvTVA3STU4TmtUelhtcklDcENZNHpmVFkrclRZVFNsM1FIZmhrZzVGWnh6dHRvK3YzUApQdUFKU2h5RVROckpwVG1jNVZIUi9NQzh2WWphd1ExZkRZSS9jdm1mYlFJPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-06T23:56:18Z" lastUpdateTime: "2026-07-06T23:56:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved