--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-06T19:58:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-06T19:58:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-06T19:58:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-06T19:58:01Z" name: csr-pp8nj resourceVersion: "4977" uid: a7c501f2-87a4-4033-8c9a-48aeccd56aac spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f451a0056401cb25c269fda0dacca22b6f703e3dc98e1211f56f5e2377d3b536 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRTytoMTg4Wm5TZ3E3SzQ2T3JmcHVkakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01EWXhPVFV6TURGYUZ3MHlPREEzTURVeE9UVXpNREZhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemt0TmpZdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFaXdZajZoTVdySmdmQ1VoZwoyRlg2bytML1NvMEMrQUxDY0JrSU1WTWxEbU5Rd3BQV3l4RzVZeHYxd2VPa0prQXBlUnFpL3NEOUNSZEpFaHF3CndsdWZONk9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJXT0F3OW13YmNzb29vckRTWi9FeTI4VkRRQUVTdQpuSVMySGtmOUIvRmd1bTVZYTVvalRyZ1kzSy84NG5yNFEvVmxVZXgvbVYrZFZtWFpEaVJRSG44d01BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUNjbmQ2Q1U5WC9RU0VxbHQxa3Z3OEo5V0pkZ3dwQjNZNEk3UHR3SmtUR2RVNkkKL29lMzh0SGJqci9zcndiQkRuakZ0MVFXQ2tTQk9kbjFvclZGY0hzQXRUUlNDOGJBT2FYNnREbDFQMXU4bFVhcwpkSjBIaGdOcWFhYThRL1JzbGtwalptTEs0NEZlSVIyeEsyMDV6T251a1A5c09RdzJWTG9ySFZGVzgvZmpTeVlBClFWajgvSGVaZEVHZGhNcVNta1Q2SGh5UlFyQ21lTStZbVdtY0JJZkFvTEdkd3pUanVPTUc3MVVZSkJQTG8wbGkKdUpUYjBQZGRwbWYwRVF5RmplejRmNndKOGhxYmFPV0MyK0FDbGtwNFBINFRBb05wZ2oxYU1wZWZjaEZIM0tIWgpyNGlLQ2JOeW1QbWpERzVYclZwR2Q3MnNkYm8vWUN1T3pPVk5saGdDCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-06T19:58:01Z" lastUpdateTime: "2026-07-06T19:58:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved