--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-27T18:31:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-27T18:31:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-27T18:31:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-27T18:31:42Z" name: csr-6z4d5 resourceVersion: "6268" uid: 880a9226-60e3-413e-91a1-9fad17d75736 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d56240bee75d0818b006c06a758e251e22141de16939de638fd9c1c1073cee7d groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE14TFRFMU1DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUTFY4b21kQ2VSR0pkVWJBZW85Q25MaG5Da3JvZGhhK3BLdWRyeEp0L0IKbDdaSkgzZ1RETzJpcWI5OXd3bmorbDI3c01qZExmY090c0NUTlV6SUMvOTNvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJaEFQK09EQ0g0UGtzN1cvNkhQa1o0VVhYbTk0RGl6cGwrb0EwQXRreEhVNjVlQWlBQndGa3lnb3VXClN1bE16YVRqYnZldkd2QUpYZVJiQ0xlWlZjRkpPbXBMTWc9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUpnU2pkcjhxa051ZmhKMnpJRUtJTUF3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STNNVGd5TmpReVdoY05Namd3TnpJMk1UZ3lOalF5V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE14TFRFMU1DNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFUTFY4b21kQ2VSR0pkVQpiQWVvOUNuTGhuQ2tyb2RoYStwS3VkcnhKdC9CbDdaSkgzZ1RETzJpcWI5OXd3bmorbDI3c01qZExmY090c0NUCk5VeklDLzkzbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUZxWWIrbjAvb1hpT0hleUdsWlFFa0VBdlhYbgpLUWZnTWxpRCt1b3drTzRneEtsYmFWa3NIYkxkdklodm01TTh1NmcxZTdVTzFFQnB2MUk2Q01FM2QrQXdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUlVdnlrejBnV2YxWjNNT1Y2enpxeWJiYUxYWjVjckRyNmFrWWVab1lMeUIKeEZBWjY4ZlNNMHlNWlJ6cXk0T1NQUWJzQnlDc2xpeXl2SldIZUhpY2RzUXFkeWhmWHhUV2Z6ODJuakgvS3haQQp2TE1rc0dZZTFla3UwQ1Z0VnB4OVBsVzI3ZHNhYXd0azFveHl0NU5QL1NIdmw0N2duUVkvSngyblJKTFNnOXpWCnQ3ZVY2TkhYdWhMMG51QXZVNVRsc0VacGZjOWJ5UjZzREw4a2l0S0xuUzF5ZVB4MWJhWkFmRjRRSVY2WVZzem8KUGVJVGVLS3h3Q3lYQUpXRDNkclljY2RWV1ZGeTYvOEdhWjBPUVZzc2JDWHJRdW1MaS9FS0FydDcyVXpBR216cwphd1RBcldtMEQzMW9kNEkwS2xxWjlhU2NJZ2lTTWhXTUdwSWthV2xtOFIwPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-27T18:31:42Z" lastUpdateTime: "2026-07-27T18:31:42Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved