--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-11T07:38:30Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-11T07:38:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-11T07:38:30Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-11T07:38:30Z" name: csr-86kgs resourceVersion: "6370" uid: fba8e73c-ae25-4bc7-858c-22d22cfd117b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=363a78372b6df0e9cf49e1c891d4785deba7780b35a24f13eac7b352ccbd3783 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lSQUo3Y0Z6ZDVXUjlubDVzOFI1TUxsWEl3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RXhNRGN6TXpNd1doY05Namd3TnpFd01EY3pNek13V2pCSk1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1EQXVCZ05WQkFNVEozTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE15TFRFd0xtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQlB3WUpUVk5pUWZjL1NBZQpLN1oxbkJoK2M3TUNMODB0R29CdmcrbC9WVnBVRGxOUnJnYmhWeUpGVWhzRHFHRmxxUkM2QnRVZEpITEoxeVE0Ci8zQis0N21qZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBczFOR2dmOEI5Z0lEWUYyNlcwMVcvOW5JdVdZRQpPL1liQjIycGZnN3lwQ1hZSzdjOEVjc0VDVENEVWZaK09ZNHhWNnVKaHJRbXlVL2hVUzArTG1XajREQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBVTJnQU9XcDhxRzR6NSt6Y1d1NERSVlVzOThKV2hQMFROVmRvNUtScFRDOVgKNjhTWnRjclNrMi9Icnk0S3AzcjErRUU4bEJRdVI0c25GY3FZU1VKWUVBZm5yMnZyNldMaUpYTm0waUREYlJPNwpjSk82aXFSOS9OeURmRUdTeWs0a1drQ2Q1T05wT09RZDhUZWdkc0ROeEo3cEE5NEM5MTlHMDN6d1pnTDBxYkZZCk1RdVpKenY2V0NIeFZ0V3ViLzN1MG1IZWpWYUF4eWllQXRUMjZOaE8yeW1kNHp0SzBQak5keVVDQWV1TVJOdVkKcHJJMmZ2N08rc05tL2crREZWVE9ObWZnN3drUC83S3lBRUVLdVdDVncvZlVrajBRNUp3TDh1aE93K1RCYU5UYQpybEcwZ0haOEtWaVZmV1BRbG52LzNJMWRpSjBlSWJGdnRiSUZOOFVoTkE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-11T07:38:30Z" lastUpdateTime: "2026-07-11T07:38:30Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved