--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T22:13:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T22:13:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T22:13:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T22:13:46Z" name: csr-9wh7l resourceVersion: "5812" uid: c82c5bd2-e7e8-40ee-8d8a-449aa3b73da3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=feb274b6dc44efcfe1c0c3c1efa4c9489c14b0dfcb8f17ed877687501f295ec6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkF6Q0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRRM0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkNoZWJvVWx6NUNXb2FEU1VlOFpvVXBycDBmT0MzajB5OWs2aGkzSU92SmsKenJ1T1ZaWHdldmJsSUZ1bnB0L2VUTlc2SEkxV2hKSkl3TFJIYklzc1VwNmdBREFLQmdncWhrak9QUVFEQWdOSApBREJFQWlBZ1RQUUJXQlFIK3gyOXFqQkVqQUJDczd3MTNpZTJyNEF0eTNlaHlUaWVVZ0lnUHV4QUs5RTdtWWp4CjJLOUR6NVFkYThqQ3VSSGV1bTBBMWo5T0lYbklwN2c9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T22:13:46Z" lastUpdateTime: "2026-07-16T22:13:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved