--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-10T22:01:35Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-10T22:01:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-10T22:01:35Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-10T22:01:35Z" name: csr-hxwb7 resourceVersion: "6507" uid: 58847bdb-a0cb-4ad4-a577-6405e33704d3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=57e862b6dfd9534545106f922b1e2c21ea842ddcfc85bc312f21c7e00a429380 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkF6Q0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRZM0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkViTUtCMC9oOFVUc1A4bk5xc0VIa3ZVMmMzUXo0eGFkT3kxaWZoUGRFOUwKUkxPM2FBc2YzTm16S0VIMjBmQUlKYkpsRzhJL1oxdE9vYy9SaE1GbFNzNmdBREFLQmdncWhrak9QUVFEQWdOSApBREJFQWlCQjhhVDYybi9sUHhhMWRGZVF2RWxoYUN5ZnFDWlJoTlJrcVQ3TFdCTE01Z0lnWUJDNW1wQ1hLUC8xCmVPb0l1R3NSZ0kwd1F6YXVicTU5bUtBb0REMnJMeU09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRQmJrVDJiZkFQRm5Ud1RESkZlRm1yekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UQXlNVFUyTXpWYUZ3MHlPREE1TURreU1UVTJNelZhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekF0TmpjdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFUnN3b0hUK0h4Uk93L3ljMgpxd1FlUzlUWnpkRFBqRnAwN0xXSitFOTBUMHRFczdkb0N4L2MyYk1vUWZiUjhBZ2xzbVVid2o5blcwNmh6OUdFCndXVkt6cU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNMa2VxUlNudExvOU0wbVZRcUdaeURPamFHS1ZDYwpKUDNGNkJSYTY3LzJvOHFEM0FaZmlWd0hGOGRKalJoRXhUbVpaYktxZ3h4R3Z0NVh4SkhrYkFrdU1BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUJOQ3dpNWQ1MHZPWnpPcE1HWk1TcWJyT0R5N1hUSnV0NlpQMTlzdlU2QW9SS0sKM29UMGZzOHRlaXJVSE10azN0NUNWbC90UzIvUkpyeGJxTUlhNDdQazVxbmx1dFRmc2NpZUpxaUl5WldMUVRoSgphdGYyVnNiQkZKRTdGdk1vOExaakYxZjBPamE0MzdTcFcxV3JpN1p1YTJ0WW0xdk4rdU1JbGJqSDg5a0JLL2RZCmxvcFAyVjYwWURwS1BFNENKWi8xRE9wcDFySUZRS0t5dUNVK2hXRTB5bEVodXJkakphUnI5bld1MlFuR3p2c20KSUh4cVlLbjZWSnhyNWFobzVmZGlOUkROY08rSGJIbjVnZVh1Qy8wTU1WUGgyNmJ3WFhqSTNxaVNjcHp4Y1lZSApmUjMvRWlIODF1TUZENmRmRCtCeHFlT3JndnFjZ1M1b2lCZkszZGlFCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-10T22:01:35Z" lastUpdateTime: "2026-09-10T22:01:35Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved