---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-09-07T12:52:46Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-09-07T12:52:46Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-09-07T12:52:46Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: machine-approver
    operation: Update
    subresource: approval
    time: "2026-09-07T12:52:46Z"
  name: csr-2jcgb
  resourceVersion: "5893"
  uid: fe4ef00d-d095-452a-ac82-98ca63caf9c2
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=584a1856890f44097e517b6150b156561f13d99c2ebdaefa1be3b4e118011b28
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-machine-config-operator
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client-kubelet
  usages:
  - digital signature
  - client auth
  username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1VENDQWFHZ0F3SUJBZ0lRTmJZbGt6eXpDNnh1UXN2b0ZyaVM2REFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1EY3hNalEzTkRaYUZ3MHlPREE1TURZeE1qUTNORFphTUVneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFdk1DMEdBMVVFQXhNbWMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREl0TVM1bFl6SXUKYVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVM0cHFGWHNyemQyWGtsMkhPaQo3OE1zbnFxMHVBaGJ0cWJqU05vYjFXTGJ5TDZaY2MrR0wvQjFQejZ0VWpvWDM2RzdOUGo3eWtDbWdLWUJmMHFQCnRnNG5vNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFqQU0KQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRTUJtN2xxdkdLN1A4UzR1OVd0UzNzSDV4WEJqeFNQdApGeGdUR2pTdHNTdDFJR1dERG13cVZvc1Q3VjJGcFpKZjFMOXFyd0k4ZjJKS0JabUs1YWJOQWdvd0RRWUpLb1pJCmh2Y05BUUVMQlFBRGdnRUJBQmF2R1oya3pJb0VDOWZGTzRYVnpqRmpBaVBOU1ZwQ1Z4cEt0bEp0aThMRWZmV0cKTVZtV2hTRlZENzh2NnRNWnBCaXM0SWdEbEtJa0VSdWhIQXJWb2ZzV2NLM0hsSEFNQVJxUnVyYTVyNVUxejhOegpQU25qVE1XMjE4bWFuWGxVTVk3NG8vN2tCbVk4enVkdno3MXZHTzhwRVNSK1BZSVAzei9uV29XOUxtTUFkWG1kCm1xMzZhSjJiTjBQOG9OaGF6Nkh3YXRKM1ZYbGxsUExEL0JTdG02LzR6NUh0TExhQnVtQmowUTlEa0lZYWxFUkYKSzdRTVY3eU44SEpETUF1b29Jek1SV1hpdFJtYlBObTJmSUlBVzlaVnp1dVFMMTJnSmNhZnVQNVJ1VUdNamZPcQp6T0NxR1FlV1Q0bkRGUGVTclNERnN5UTJlSTZKSElvaGpWbCthVkE9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
  conditions:
  - lastTransitionTime: "2026-09-07T12:52:46Z"
    lastUpdateTime: "2026-09-07T12:52:46Z"
    message: This CSR was approved by the Node CSR Approver (cluster-machine-approver)
    reason: NodeCSRApprove
    status: "True"
    type: Approved