--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T21:58:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T21:58:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T21:58:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T21:58:40Z" name: csr-lhzwn resourceVersion: "6466" uid: e9ebaab1-1b68-4525-8a36-b3fadbd1c811 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=754fe701cdfb4abd8ef27469057ca643998ea91f768f162e4fdc748942ee731c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1VENDQWFHZ0F3SUJBZ0lRZnd1OVNjZ1RWMDl4MERWaWdHYUd6ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UTXlNVFV6TkRCYUZ3MHlPREEzTVRJeU1UVXpOREJhTUVneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFdk1DMEdBMVVFQXhNbWMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNek10TXk1bFl6SXUKYVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPUFFJQkJnZ3Foa2pPUFFNQkJ3TkNBQVRhK29QMHQ0T1cxWjBDVmxSLwpxTitPbXFpVXA3MDVTRzNSWnF6WWV4Yjc2M1B2emwxSGZWOW5MdjVvaE9PUmdmNHBSRkU5T1RhZ1JwR0RBWk5KCngxbDdvNEdETUlHQU1BNEdBMVVkRHdFQi93UUVBd0lIZ0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFqQU0KQmdOVkhSTUJBZjhFQWpBQU1Fc0dBMVVkSXdSRU1FS0FRTzZNcWNUV2dsTFIrTlhkTHBoU1FjWnlidUVEVk9JdQprbkRLbG80aEVaK3hlUC9EUmRIWXBITitONVVQc3hZUzRPVVpFK0FMWWlBZmdkSnJjUlJ2eWJrd0RRWUpLb1pJCmh2Y05BUUVMQlFBRGdnRUJBSmZpeW5kdHVaRmxWQTBoNW4yQ3AwUWJkM0pzSXQ0U3RlOFhyYnJzR3NWOEFRbGEKNnNaa3NtZ2JFTTdJRHVsNVZQS2RMZnRPYjRjK3hGVWx3MjdSdytoNGJLTDR0ZnRDTGw1aUszMktjZk14SURyRwpjU3BnQ2JsdFZocWw0WU9ncThqemx6eFMzUVV2RGdRZHJVMGtBR3dRckFVN2kwU1MrMTdGc3NWaTY4VTliYkhaCk1nSVZob2dFMTJMSGdhME1CQ0pFdk5kUmFpOEFRNDhONmxodXZwN3B5SzF3ODJoUGduTVM4c2NBeTZiWnZDUkkKZHpaNlI4aHBweWZVNUZCUXRNTkhIMUZmRUc1ZGU4QmVKSEFBcUNjYUw2NThIaHRrU1hlQUxMbmdQY3IyL3BaaQpEbkp0Zk12amdJRndtVnpOVEIyM3pYbTkycHVVMEFwdEhTdU5tT1E9Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-13T21:58:40Z" lastUpdateTime: "2026-07-13T21:58:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved