--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-21T17:59:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-21T17:59:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-21T17:59:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-21T17:59:59Z" name: csr-jj84g resourceVersion: "5957" uid: 98459a9f-5022-44c2-89ca-da41a9ff0c10 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=8dc38111d8bbf7a1af1a54328aae3fdf883fb51fbb9bb76ea135eee92ea0fcfd groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0yTFRFM0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkVBSkJyYnBiTmhQN1JOR2k2dXcvME1Hc0tTN2NmanBMYzkzdUVZVEpVTDIKSjYrakpMejJ4b2FQbnFRc0tyMXR4Rlo3UmozUUhmejFybmNsNjhCTVR1K2dBREFLQmdncWhrak9QUVFEQWdOSgpBREJHQWlFQSt0T09QbDZScytCOGQ1QURQcHEzY1VZb0VpL0x0amNPSlVpVWtzNnpCQU1DSVFDQ0syZ1ZnNCtaCnlvWVZqK2tndURIODloVDFXWktXSVZvdktMOUhmeUFOL0E9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-21T17:59:59Z" lastUpdateTime: "2026-07-21T17:59:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved