--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T02:34:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T02:34:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T02:34:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T02:34:15Z" name: csr-7l6ld resourceVersion: "5750" uid: 3d306f3d-cbaa-445a-88a8-bb4eadf793df spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=605e70af4c5fbf9210682a16534703aecf910785f709dbc515bffb7341cfb800 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE00TFRFek5pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUajU3N0N4RERqVmJoR2R1ai9PTjhnMHk4NVA2NWNNNVM4Zm1yVUpncmMKa2VsdjVHbkMrS0h2dCsvREdMUGI1OUlZM3JhSjhXb09IamRkY0tXT05FTldvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJaEFJcDdaNGFzdk90WEUrYXM1Y0tpb3FaZzRCM1ZJNlF3ZDJFSTljaXdPTG5BQWlBZVU0Y2cydzB1Ckl0bGg0Q0hDKzZFR01SeWxpQ1IzSThsaG9PYm14OTFBUkE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T02:34:15Z" lastUpdateTime: "2026-07-09T02:34:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved