--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T15:00:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T15:00:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T15:00:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T15:00:40Z" name: csr-wl8w5 resourceVersion: "5868" uid: 103a3b35-534b-4b35-872b-346fbd5857a7 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e33e37236425d0bb34be727735aca3b2c6da17ef4a326aa2c24d7aa683762137 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJqQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE15TFRFNE55NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSRU5HU3pGNEw4UGdXQzlXWmpDNUpjM0I2TTBvWG9xZlFXejNTNURuc1gKM1NlSUt6VmVLVW1ZMjZsZ1JoOVpUSVE0aTZwcFd1TXpLU25oMk0rWUlpQXFvQUF3Q2dZSUtvWkl6ajBFQXdJRApTUUF3UmdJaEFKZDBiQ3lTUXNKdWQwLy9UcGcxV0FoTXlSTm4xUHZtMkRRN3dVQjVqWnhNQWlFQS9kdXVmTkRYCnkvbGhWQkM1TjNXTFg2RTkyVWVWVllBSUFIMXNKVEZEcStFPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T15:00:40Z" lastUpdateTime: "2026-07-07T15:00:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved