--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-14T09:43:31Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-14T09:43:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-14T09:43:31Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-14T09:43:31Z" name: csr-cxdxz resourceVersion: "6388" uid: 0d5b779a-891c-44d2-82ce-33571bbd27e7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=322b84d38b350c657f2bf24475e464830dcf4d7e3c6967cdd00264ada51e45af groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1VENDQWFHZ0F3SUJBZ0lRSGE4MzlkdUlad3FVYTJWL2ZqM1hGekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1UUXdPVE00TXpGYUZ3MHlPREE1TVRNd09UTTRNekZhTUVneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFdk1DMEdBMVVFQXhNbWMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekl0TkM1bFl6SXUKYVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVNPMjJRc3dHR3hoUzBISk9MUwpCcWR4S1VsWnNod1M2cFNlQmx0OHpZUWNmU2NoZlVodGsyM3kxRE04Z2EySENKaEEraTRaaFU1TUlMenpRck9XCk5IbWhvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFqQU0KQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRRDIxS1BuMDd4VjAySjVIQmtWcmRRSHZXcTlWVVNidwpMYWNCVWVoTzJKa2RuS21aT1hZa0VnQnljS0o1SGVZN21idmVTV28xT0pnMWtIOFJQYnV2bFpRd0RRWUpLb1pJCmh2Y05BUUVMQlFBRGdnRUJBQW4yd1p5OHphVWlqR1FST1lqejIrOS9BTmRPeEZxOFJQaHRWcFgwa0ExSFl1UmsKZXJ2UFpCSkl5MzQrM3FVbGFNc1h4VzBiYjlYTU5DQUJoc2RVczM0Sm1hanNDREE2VGFnVE5nQXJqR0VSczNtNwptZ3ZCSzRFSHNuNjU3KzJpVDhIdXpEcCtwWmF4S3d6T28rM21DY3VmWkJFWmR6dWJmREwwR2hldXNmUzY2cVNWCmhtc0VjOWptVW9qWHRrM2JZSmxNaEhWRCtlMkt0a3BCbzdMekJ6NEZhbXl3em14ZXZRaXlIa01LTmRJV05wZlYKVW5BdVhLS2FLa0ljcy85djZ1cmswaW9xR1UxM1hpS29qeHA5MTRPYk8wbEQxeWtQNlhWbHlSSXNnaUdQMEFDagp5Tm5GQjlyY1J1MmN4MENSaDlTa1pWMWg5bVdWY0Y2NDQ0U3NUZ1U9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-14T09:43:31Z" lastUpdateTime: "2026-09-14T09:43:31Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved