---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-21T14:17:53Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-21T14:17:53Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-07-21T14:17:53Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: machine-approver
    operation: Update
    subresource: approval
    time: "2026-07-21T14:17:53Z"
  name: csr-cmpbh
  resourceVersion: "6413"
  uid: 25077c44-f153-48da-a14c-7036cd32acb6
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=b74fdc093099a13ad11d8002b5e41d7a46077c283639159ada328828fd0a5911
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-machine-config-operator
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client-kubelet
  usages:
  - digital signature
  - client auth
  username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-21T14:17:53Z"
    lastUpdateTime: "2026-07-21T14:17:53Z"
    message: This CSR was approved by the Node CSR Approver (cluster-machine-approver)
    reason: NodeCSRApprove
    status: "True"
    type: Approved