--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T21:58:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T21:58:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T21:58:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T21:58:07Z" name: csr-b6gbj resourceVersion: "5694" uid: f63f0cbe-4a33-45c4-bb0d-debed28be0c6 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=754fe701cdfb4abd8ef27469057ca643998ea91f768f162e4fdc748942ee731c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRSmx5dG1Mb0E0VHZhdllWYTR5RmlPakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UTXlNVFV6TURkYUZ3MHlPREEzTVRJeU1UVXpNRGRhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemN0TVRnekxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkJIaDdxdWZvWVFuZldvTQpNSmk3Y1lMa1cvRk1RWDNvcnM1a0d0UEV0UlhHUXFtdDd3MW95MVlKUjl5dEI1V29IVWd5V1dubEpIVmlZc1MrCk9wK2d1aE9qZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBN295cHhOYUNVdEg0MWQwdW1GSkJ4bkp1NFFOVQo0aTZTY01xV2ppRVJuN0Y0LzhORjBkaWtjMzQzbFErekZoTGc1UmtUNEF0aUlCK0IwbXR4RkcvSnVUQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBSDVhRWZUNVRhSzdDYmZQeGZxdGtOWStVNHZ3aW5sOVhINERmbmVLY2IxT2wKRzEzRkVwdXluU3VycTRnNmpoQ04vanN1RzVLY3p0amVNbEN4VjdPY0d2eStseHJSWjJVUU15VmNNdG9BYUlTOApkb3FLVnRwdm44bE8wMllPUjJpRUhObU82U01YVTZoWkFDTys4czJmK29oa2wzN3M4WE9veVVRd0RQcEVPMGwzCnpsTElLQXV3TDRLTGhpdm1jbFErdGRiMFZjeE5lV2YwTjJZYkZFWEtRUTFoWHdCd3k0NWNyaVhsVjB1bVhaaUkKbi9zL1lRdDBDMzdNTlI5RnVsYTFhbllkRndrVzdzMXRZcERhaDRxRUdzekRxVjB3UExzNEFmcUFIczI4QUlMZQptR1UrQUFlVG5peFlSV0p2SzNPMzJrSlB3aWJnZ0diZDFqb3h5b2xuL0E9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-13T21:58:07Z" lastUpdateTime: "2026-07-13T21:58:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved