--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T21:11:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T21:11:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T21:11:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T21:11:54Z" name: csr-jzvxv resourceVersion: "6479" uid: a7168e52-48d1-4464-bcc1-41b052a2f9e5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e8c76a45546e9142709d8d906fc1a9440504f38186156bd6b3b5a68f9795e527 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUplaVM2LzFQQnFmQWc0MWt0d3dCUTR3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QXhNakV3TmpVMFdoY05Namd3TmpNd01qRXdOalUwV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE16TFRFNU9TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFRSVcyZXRrUWVlYUhaSgozbjNDWmlDSW11OS9JR3htN2xqTWZ2NnVXbVpuZzVQbDZ6QVZZQnJUc2R6QWNHZ0hiaGg3SFNyMTVSc1FTTjE5CnBCTW1LMWF0bzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUURZdDdyZFhZcGpVUjdzVy9wQTljODlzNVRqcQpCb3N1RnFTMEdidHRYYUZhd0Y1dUxhSUNtQm5aRnV6K2pONjAvMEk5YldsdytIV1JlbEdDT1RrenR2NHdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUV6T0M2VFVjemZQYjdabG9CbWN0V2JRNWxPbXlxbWpTOGVCaUYwZ3FaekYKanhIN1pXTkMxd2JXMjVZalJTUFE2Q0RXaHpPeXNycnViWjh6Rm9Lbkt1OUFSWEJGeFFlNXBFejFpVE9DQnFzLwpOOFZnUXJvNmhwbXdLdUJHQjZqZElibFJOWE0zSXZUTlpydGJwSmZkVVlJUnBBWjhRQ3JnanJoMndKUXI2UGlvCkF0dmxYOVF0cDZuQ1ZTMDBkcWU0VTkzQ2xsTFZaemN6eDd4dVJmZjQyM3BpN3R2QXo1S2x5SW9SemxmUXlYZmYKYkZHUWxHekd6RzdCUDFnN1ZaYzRId2RCRzRjQ1VWRkVWYnJuUTI0VHUrS2FKYjNtMU1wUU1hditnMjE3a1d4NQpyMlY1Z205VGJCcHZXRUZSaTJKWXZJN2k4WDhucjFKa3JyMms3L2JEQjlnPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-01T21:11:54Z" lastUpdateTime: "2026-07-01T21:11:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved