--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-23T00:20:11Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-23T00:20:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-23T00:20:11Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-23T00:20:11Z" name: csr-vv7zq resourceVersion: "6855" uid: 6296fd2c-9102-4be4-afbe-7fd240233602 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6ee8cf971563adc8c4c72e10f897c74c481039e324621d5c885be22d64c93ba3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRYU1XMzZlZFdISlFTY2djWEp4SWNXekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qTXdNREUxTVRGYUZ3MHlPREEzTWpJd01ERTFNVEZhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREV0TVRjMkxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkVRWG5ydEZZbWJxRnczVgpjUnErLzg4SFo1T1ZURUlNcjZLTHppc2IzMnBwc3dTcXZuaFNFVmlWNFZCVDh4NWU1SElqc3BJQ082SndCekVsCmY3WEJBV1dqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBQWJCSUU2d01yUk5vSDFnNTFWTmx6WVR3ajJWLwpHdGI5bThrNHBNYng3YzhiT2ViRWRyQ0lnSUp6L3RPVGNMUFViby83Z0pBQkloM1YvU2gxWm1oWStEQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBRFd3NzNXcTdaazZ2am9VSUVaNk9VZjdkVnpHNzhuMmQycFA0YzEvN2IvanYKVFFBdTQra3pXNmo1bE1ZSFhKU1dzaW1mQm9CTkNXa2pDZy9VU2JMQ0UycXoxYzBxUVU0bXpFcUZaaUtxc2F0dwo2TFpLQ1J3V1daZWlCSG5wZDBVbTAwWEtVc0NCdWNPdUpwODhHNmFNSzhtNFJiVnY3S29Ic3Q3UzUvYUVnRlNBCndEMmc0Mi9aZ0xsSk5pVjFpUWFDOFgrclZmVU5qdW5NMUF4b0dxcGR5Y3BFUkU3ZWZzbVFibVdtRU9UUVp6emoKMHdRUmV6VVo3dytlbVd6MUE5bnNERGhRUkZPbkN0SGtxVzB5SnhmTDIrT2NnTkVyeTFjZGtxSnBxWEN3Rkt1NApRZkxyNVRUZU1HbGY4cG01eEVOMW9jdFhudGdwRDhub0ZFQ2xFbGp2MUE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-23T00:20:11Z" lastUpdateTime: "2026-07-23T00:20:11Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved