--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-12T00:42:57Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-12T00:42:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-12T00:42:57Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-12T00:42:57Z" name: csr-qbpjr resourceVersion: "5638" uid: 7f0e98d1-4b35-46c6-8420-b11d477681f9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=048d31e36ca388c0c14af8125b5b3f234526f29f38143c5439aeb3f9db23c40c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRJME1pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUL3AyTnNJakdnZ2ErcTg3dFY1UnBBSTBwN0wya21KK1p1WEphcmdQRjgKR0gzamI0aktwMjhzK0VreTdZTHZaR2lNaEo2bGZmbFdqOW9zL3RBY05IdFZvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJaEFMS0ZEWVlUcXh2aG1EY0laRzB3RHBqdnI0WWVKWmkzL1ZPd2tEWi9jSDhlQWlBK2JLNDYwY1drClY1QVBWTXNXdyt5Y0JjaU9JSXlmUFM4ZEgrT0w0OWxmS3c9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-12T00:42:57Z" lastUpdateTime: "2026-09-12T00:42:57Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved