--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T01:00:06Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T01:00:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T01:00:06Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T01:00:06Z" name: csr-p7jhw resourceVersion: "6386" uid: 2ff704e7-3815-4d2b-9d1b-688247931225 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4b999bd5e78543d7f8c34850a3cd7357e70b470056bd21e34ce51a51d1b4ad5f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRRytobk03eUxEa2tpa0lNSWF0WUVZakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UUXdNRFUxTURaYUZ3MHlPREEzTVRNd01EVTFNRFphTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemN0TVRVekxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkxiYzJWbEtkemg5ZzFYMgpWc0ExbENRQzJrdzlCZWh4UlhTWnowZUpXUjc3TFZvUmdYRHk0WVB0YUtpdkRUMmNCZkVRWWUrMG5TWE10RndBClhCZWNmWENqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBOUo3WkFINEJNUmZpZXdodHVIUWRVN2I4blpPOAp3TnVJVWhvVnUxUDZhQzgxQ3ZacHkxSTNXaVRKN1RLMzJ2VDNMRWd0YlkyMzdhV2QyVmFTMGFrdWJqQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBTldiMWV1cWxzN09EV1dKSlJQMDdBeXkxcE8wTE11WSt5YjJNQnIyUTdWeCsKYm1ocGtBVThueWY2VzJoaVpXL04xTTB3OUNHY21LYWIrbUlBenEraC80b3hGQlg5WThkNVpSZG5CYTFOYmdRSQpFeGtTK3hLelYrcVNmVGxtV3JNdTVCZjZrclBVU0NQZWtiZHFMVzhNNGY5anBwVVc4QU5tUi9OdDAwNHJNQkFVCnpFMU1TUzhIc2ppeGl6aWdoR1NmT0loM3lwdllldElwN0NBVmhqSW5Fc0JhV29KUWRxZTJWbW5yZHJoZ3czU3UKc1NXNkUwRnJpZ2FZL1Z2OWQxb2svYjJzN01TVFVlbndKbkEwOWN1WE9iYVFJQ091WWJ6YVp4eWE3ZW1pekRpRQpIRmowcVBRd0JMSnZ1S0dvakRLTjhsRzNWcWZXbDFZam0yTGE4OW9tMkE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-14T01:00:06Z" lastUpdateTime: "2026-07-14T01:00:06Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved