--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T12:52:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T12:52:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-07T12:52:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-07T12:52:57Z" name: csr-v2z7l resourceVersion: "6135" uid: 2a1c927a-2823-4bdc-88d8-16f8f609d895 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=584a1856890f44097e517b6150b156561f13d99c2ebdaefa1be3b4e118011b28 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRFek1pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUbC9UMmUrU0V6R0R0dCtkaHNFZ2N2UU40bFhnZmN0VXc5S2VSR2tvNCsKOEgyY1ZDUEhHK0orTWlGOFByQjJNVExMUjgyWFYwdFJlTVZLWG1SS3d4WU1vQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ1l2QjNXY0RjUGlzVEVPWkRDcCs3UVhRUGUyVWJBcGhpNTNaQitSM0J0T1lDSUUvUjR5RHpMR0JrCmZHTWVxRjNrMHNmUnNzdEo3RjBmb1hOazdZeSszMDFQCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-07T12:52:57Z" lastUpdateTime: "2026-09-07T12:52:57Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved