---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-21T18:00:12Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-21T18:00:12Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-07-21T18:00:12Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: machine-approver
    operation: Update
    subresource: approval
    time: "2026-07-21T18:00:12Z"
  name: csr-6nmf9
  resourceVersion: "6201"
  uid: ca2bfe1a-3be5-4990-ae43-4f852f323424
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=8dc38111d8bbf7a1af1a54328aae3fdf883fb51fbb9bb76ea135eee92ea0fcfd
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-machine-config-operator
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client-kubelet
  usages:
  - digital signature
  - client auth
  username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-21T18:00:12Z"
    lastUpdateTime: "2026-07-21T18:00:12Z"
    message: This CSR was approved by the Node CSR Approver (cluster-machine-approver)
    reason: NodeCSRApprove
    status: "True"
    type: Approved