--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T13:34:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T13:34:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T13:34:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T13:34:20Z" name: csr-xhbvk resourceVersion: "6194" uid: 36538631-c086-4bb1-ad95-b7da00bfbc90 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=19352844cd1242f27b921239c7a5b645baf5939f0dde7f9de401e0cd31d2346a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRRVQ2U1dtU05FYmhMWCtQanF6RnBiVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qUXhNekk1TWpCYUZ3MHlPREEzTWpNeE16STVNakJhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNell0T0RndVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFWW43eHFZcWpzY0x2VGRLaAo2Q0kydWFBWlg5cHRVL25mYmlDZjBIUjljc1FacXIwMFpzZytpNTRZV3drbnBBcHYzZDQ4dkRFUlMyZEtlK2N3ClpFdS92S09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJJWkVQR1MzUjBZbDlyK1Z5K3FZVzdKMlYzZkl0MAp3amJvRE8xWHU0ODUwSEhtUlpLamV0VUZyR2dLVUpkU0MyUmZsMk1leVEramludlltc0FyOGYwUE1BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUURCMVU0Ymd5OHhoT0NKSndPaWtuV1BhaWxDdUQzQmhjVHN0akpZVTliNzNQWXYKckg2V2hVaThEbWd6ZzlKMENJdnJCN2hrQ2x6emJ0OHZsakMvR05UQUpFRklwVjRWMitKRVRWb3BDVE96bm9DOAo5MUtVWXVlTzJuMHVyM3k3Y2Rib1h0ZkVNYlJ0cTcweEh5cVRpK0t5TjBsYStmRkp3Zk81QStmZTVoR2NKcmJFClNwMDZjSUpLSEs0SEFpZUMzOXQ2cDg3ZlNoNEJtK1JmbFYxVDZNRFJYMUNpcWhHRUh5Zmp0aXRWV3lSUnp0NkEKTHRkQTF2ZzE2R1BFUHg2MlltcEZwazlwWTBXN01HNFBrbVIybzEzYmVRVTFrQzdZU1llUDZYQkN0c0hCRUtYTgpVbTRuSU5jWEl4RDJFTmh4U0RsbkRTVHlka3QvUlV5MSs5Y05hTXNPCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-24T13:34:20Z" lastUpdateTime: "2026-07-24T13:34:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved