--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-07T08:01:58Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-07T08:01:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-07T08:01:58Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-07T08:01:58Z" name: csr-qw55g resourceVersion: "6213" uid: 0a6aff44-548d-407a-98c8-a79e85e7e9dc spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=19efd788558d6b7e78f40059ca4a62edf590e116a9f477caa99b12ef0a8900c4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRR2FGWkkvaHZrTUY2b00wZXkvbzhmekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1EY3dOelUyTlRoYUZ3MHlPREEyTURZd056VTJOVGhhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREl0T1RrdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFeFQyWVpmS0ZCQkNyQXFJVwpPaUI1NzI4OTdWNWNSdnJvNnNlTExTa1ovTUkxTmtRMHNadFBudnBzcHdUZzJHNEF6ZGJwS2g4cmJKRllsYkJwCjVQeFRhS09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUNsOGM1WEljUWZSbnlLaTl1ekVsUzkrdDRLS1pESQpVT2pqdG5FdTIyaHpwTk5pT2JNVkR4aXl2ZzdoVU9sM200QlJEdzRBUi9pbG1tVHhaZTlrQ1Nqa01BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUEwdDh6b3lvcDdIVHpCSEF2Z2VwWXA3a0g4bmw3cGlWVHY4T1laR2YzYWVvQ20KRENSZTU2YWVpV3pmRklXNlNqT25MUWE3RlVJVVMyNVlsWEo4eXZKYWNlcWY3RUpuMTBNcFduUjZrVHEzcmdESwpJTVh6bERXVFlnblhHekwwSlN5cWVJUWhONWY3aW5FeFhFY3BVVm13U09raWtXNTJoZ3BhWXdxaWw2SE5kMUtzCjZIWU5DTElJWnFxWVhFSjQ0SDR2cUxndUJpUzQ1cHE1MWZPSURqVFpvdG9wTmcrUGlDRk9Ici9KQXFkZ3hnTFEKc0JmMXd0T0I0TUJkTkFlbnpLTDlURFFWbDJUZFRsaWxQZnQvMFVPQ2VsVXAvR0c1RHRocDcrRFkwQW8wc0VDTApWRWpXc1IwQWxBR3RnWXhRV2pQWFFUZ0xxRDlFU1F5azRSK2JVOVFRCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-06-07T08:01:58Z" lastUpdateTime: "2026-06-07T08:01:58Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved