--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T13:43:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T13:43:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-21T13:43:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-21T13:43:59Z" name: csr-4rv9v resourceVersion: "5691" uid: 83d694fd-4e23-4621-9e1c-302ff88d8826 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=53122cec174946dafaafaba6c4d010307adcc0ef7ff37682e6fc896a0f3c44c9 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRJeE1pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSdFlQVzJXU3krVXl6eVhDbWhTMm91dzEwWFhXL0JwWDhBRGZMSlE0SGUKR1pZdnZQZ1FNN3BKd21wRXIyaE5GblV5ZzljN2NaZm1LckpJejRJRG42c0dvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ1R2TzRsUDlTV0xQeEV5YWppeCtQVWlpb3lOUXVWTy84K3YzYXhuUzR1MThDSVFDcDdsVEcrRDN5ClZmcDJyQnNlbm9vQnNmTXF6dUw4ek5DQkp4UWl0TWxOU3c9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T13:43:59Z" lastUpdateTime: "2026-07-21T13:43:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved