--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-05T00:09:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-05T00:09:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-05T00:09:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-05T00:09:22Z" name: csr-qmxj4 resourceVersion: "6447" uid: 677ca265-be9f-4ab5-93e5-3096df2944b1 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=15d9cea1dec0efc17bf4cfa793ba0f6960f1e70fea6dcc40fe2ab10a6336ad3e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lSQUpRbGNJYWtwbmpGTDhYeWljSVZtaE13RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056QTFNREF3TkRJeVdoY05Namd3TnpBME1EQXdOREl5V2pCSU1SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeEx6QXRCZ05WQkFNVEpuTjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRBdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFai9Od1E0S0pPY2pwODJycgpTbjFCVVBobVJnR3dDYU5wSnY2WWpPTXVyQmkzMjcyM0RkOC9pcXRlNWlGV0ZYaUtneE1zS0VBM3NRbEdZeCthCmhMZWVUcU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJhRHpOVXA0ZVZqZytMR3NTbmJFTWthMGJHbFRjNwpFUytNUTBMNjdleW9MbDUxRUFlZllSWDRJYmJqeUNibUZHNWc4aENrZTE0dU1jdGE5NkRjQkJtUE1BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUFBODVUMmFsUitqblNCZ3NKRlJjS2xHNG50K1pBc2lVaFFBZk83MzBNcU5aOTAKb2U0UitnU25NTmtSYXlsRjVibStSTElFTzF2LyswbFJkdGkrdnZxT3FoZEdlTExYTVdxRWllNUtwZ3lpTmF1UQplZFBQenA3b2N0MzRLOWNkeExVWnpZVmpXNTJWeUFuTzVDSEVjMmxhanNlNUZ5cXl3LzBBbjkrYmd2ZUdyRzVxCjJURjBHVTBPQXR6NmpoTEppTkh5WUN3bW95Z3VyMEZ4WFJ2dFdma1M3RHBabVBUc3cxMy9vd2syTmZObGlsdjYKQ2FraXhKbGw5RkF4Vi83MHUvbUtmaEFXU3pVOVZYMFB4SFY1bmZzbGg2dTNjY0ZzU2tNenB0ek5MOWhnWnpMeQpwd29BWEhoWk9YMmwzS2JhQTYzSXRNZ3JqNVJmRHpqWkNFdjA2NkRGCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-05T00:09:22Z" lastUpdateTime: "2026-07-05T00:09:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved