--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-18T21:06:03Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-18T21:06:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-18T21:06:03Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-18T21:06:03Z" name: csr-46b5r resourceVersion: "5520" uid: 0629a638-def7-4464-96ce-0145cb21efbe spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ea847e5a7a69d146b5a07ae411aa07f04e982d93e7cb380dcb7aa25dbdb6a21f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lSQUsxLy9rYjZ1ZEV6dlJLdklkcTNmc0l3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTRNakV3TVRBeldoY05Namd3T1RFM01qRXdNVEF6V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRreUxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQlBmc2FtT0ZDYTJFNGRYQQpudDFLZXpoVGFHVnpDcVpDQzhKM1FKSGNpQTQ3THlhNk8zRGtDM0FzanhRa0gxOXNjQXQ2dGhCOW43UlhCa3EwCmo2Z3h6Z0dqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBeTVGTHZuTXVLZjNtVk1YdG1rV1o4TmNBRkdVVgowVGdKSmg1Mjg1U0VSUEY4NkJQcVhxVWdiQU9vdDZBUEpuR3RGUEZ2bFc1dWZtd2F2TlJSU0JENTdUQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBWHlEeFN1aGFzeWh5NTRwLzJZdXJ1Z0NGeUdMYmM5dlVaS3JxcmdUNmQvVmIKbHJpTER5UWVOTXEvS1cydExYckdRSlRFOU1nOHV3WnFWbFpjRk1CejhaYUVGeVJnVURWRHF0NkZpYkM3c0tBSApodVBacEJpeFlLdlg4Wkl4R2c4UHUvOC9XVXZCOHcwYjhtMlR1Uy9xLzZHVVFJTnRJNEdnRWVwMmF0dVQ1TlRTCjVZM2ROcVBCMnE3alhJR2FDT2Rwd0ZkUGErdFpSMHlhR1BsQmRNYVBXZ0NvK3VVZnVwaUtJK3lEdkVtZE5RS1gKNStEK2FodHBOQU9KZWtGR0NSZitGdUVRR05ab3lMNUlIYTlkMVJNemJuRStPTkE4R01UZDBJZkgzUTNhcko5UApqcWdpWlZzK0c2OWtiL2dCWWVwbGh2a2xMNU16bmRmRlJuMnpOMVlSUkE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-18T21:06:03Z" lastUpdateTime: "2026-09-18T21:06:03Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved