--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T12:19:40Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T12:19:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T12:19:40Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T12:19:40Z" name: csr-bdbhb resourceVersion: "6045" uid: aab3dd9a-76aa-4e2a-beb5-865c580e48aa spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d68b0e773ea9cffb8499938876cf2b7e62e35f07e22432ea0f858ff185a16e10 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUlxUDgzdEttYTNDWmMrekJJSXBpc013RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09UQTVNVEl4TkRRd1doY05Namd3T1RBNE1USXhORFF3V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE01TFRFM015NWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSaVRVMEJWQzJaV1RSZgpCRVpkb05LK2t4cFFJcW5uRnpCLy9VT3lXNC9QVmNTdEZtT2JIMWNkSFJ5R2RlVmlEWnFad3dDZzFLUUt2L3FrCklrNVkxWjFlbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUU9VRU03L0pMT1hVdi85cys1ZkJZalJsRkFnYgpUQlc3V2lUTUxOVG10Uk14ZmVTc3lDaVJxejVLT2hMWFBZM0tFNFRpWU9VMDJQcTVvaGFZczFIckxpWXdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUZsd3Q4bkd4aXBWYWs0blVrVVUvSERzR3FoVk9ubDBiMlFDamQybTZKYjEKaFJ4UUl3Y0lUMGU0bkE3YVRzVWFKbE9KVnhsUXVGSm41WGorbC85RFpXRzVVTTVVa3VaTkoyMlR1aWZOUTRqRgorVVRYWmRKclRoVnEyeWpRTS8vQmhHT04vR3p0aFB6bERCQkVrL3UzQ0drNHoyREw4NzQ1UWNxSXJJYUtSTFVtClNUZndCSkd6UFNFSE1BblNyNjRGWGhnUEk1QXkzWUFVMHJIcFZZTkgvWHNUd1V5V3UxT1p3K3E3UkJMdUl2SGMKK3grMzM4SDdoWFQ4aTgrTW9kckphUjMxcEZ4T2hvQkpFTGFhUWU3cmZqZmpRMEswUE9IN2Rmck9Xb0ZXQ3pBaQpwS1UrZ0w3V1ZrMUFiN3VsWEI4b2gycHFyQjNPd05ITFFKNEozTW42d2pRPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-09T12:19:40Z" lastUpdateTime: "2026-09-09T12:19:40Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved