--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-03T19:09:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-03T19:09:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-03T19:09:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-03T19:09:54Z" name: csr-ccwb2 resourceVersion: "5802" uid: c8461c53-5bc9-4a3c-b057-5214a15cc0e0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2ac9420e6ace6697c7b1044b5d72fc93e446120736c69595fcb8b37d665b918c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE15TFRFeE1DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUTkpCaG0wZW9JV3E5c0R0RGNGZUVwTFVWMmd5Z1BUYy9tVEhwRHBqV1EKUDlKOHIyK0pRcVo3WkxRelpIbUVtS25xYnZudEh6cDBWaGN4WXR3enVMSW1vQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ0VKZFY4TEVLK1YvSGQ5bUxuY04vMW1kMCs0QzZTTWFmMG5ROWJzNXdLdHNDSUZXUTNVM2wzRDBHCnNZU05EcmU5NjJZUVZKUjdNeU9YbVYxb0VIaER4VDJBCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-03T19:09:54Z" lastUpdateTime: "2026-07-03T19:09:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved