---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-05-21T15:32:19Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-05-21T15:32:19Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-05-21T15:32:19Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: machine-approver
    operation: Update
    subresource: approval
    time: "2026-05-21T15:32:19Z"
  name: csr-rb2vg
  resourceVersion: "6357"
  uid: 74cc5e8d-25c9-43b6-8e3b-f4110e938a49
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=f5cdf2edf5c8b70d03084c673298aeb393d04116303a6550dbbcb1486a1bcbd8
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-machine-config-operator
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client-kubelet
  usages:
  - digital signature
  - client auth
  username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-05-21T15:32:19Z"
    lastUpdateTime: "2026-05-21T15:32:19Z"
    message: This CSR was approved by the Node CSR Approver (cluster-machine-approver)
    reason: NodeCSRApprove
    status: "True"
    type: Approved