--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-24T00:13:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-24T00:13:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-24T00:13:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-24T00:13:40Z" name: csr-5bxch resourceVersion: "5868" uid: 8b731149-0021-4637-b197-6ac190d0a683 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ea8cdfcea3fc000d4a67d990de5414754e70a742b09d3d748c138133875384b5 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQU41NmNnTndiWjFDcnhoUmNrZXZNa013RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056STBNREF3T0RRd1doY05Namd3TnpJek1EQXdPRFF3V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0xTFRFM05pNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFURzFXQm9oZ1hNSlhMTwpLQ0JNSmFnYmk0bGY1ZTBsY1Vta29GbXlGK2tucUh1bmlwZmQ2Rnh2NUdnS2lHOUpuT2I0Z3Z0dXRscnhQbmgwCk56WXdmUWdnbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUdkaVFhU2hXWkJQSTZCMXE5N0E4VUNpK0Q0Zgo2anRIcVN0MmJvMXYwNGpRQTlkblNoeGU5czJ1MG5wTnBITWJyUE1Yallya2hLV3dkZlBDdzJqZGViVXdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQU1EejBGbG1YUFE2ekVPNlVWVmtQaGJ0MEtZaTIwMHVWc0hwZmpxNHowTVUKdjh2ZlZlejhicGNqKzRiQWloZFdkN0RIRE1vcDN4UDFWay9oRUhNaEd3U21TZUVtYzJud3hTVUVFaEQxZy9QRgozek1OUzA5SThBWjFXSkFLUGdDSWxwMU9aQ3dudzY1YWhpeTVjTk96K3BtYzVMZ1lDZFUxUjVMT0R2L2hBZFVaCjJuSlBaLzAvaUJFY3J0Zm44c1UvTTBmc3pZaXdON3B3T1pEMmx0RFc1aUdOMitQSVVkNFlHR29PcGZjd3BuWVIKZmZsN3VYOVdkd3AvSXRQR0V5eHE3VVM0L0lxRjlLZDQ1L3NVNC9qdHpSWm9OSW1va2dFRVo1bTlmaGRLU09iYQo0MEVlbEhRdmxtTHpLd3ZVT01NZzN2bWJtSTQ2ekNHWXRzZUY4dmJLWktzPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-24T00:13:40Z" lastUpdateTime: "2026-07-24T00:13:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved