--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T03:32:21Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T03:32:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T03:32:21Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T03:32:21Z" name: csr-gzg8m resourceVersion: "5957" uid: ff917d98-eacd-4b25-8fcd-eca079f77ffa spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=18f9d9d3e1914e1d734772ec93a686464ffb8e9cd1a6965f924b6299431d7171 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk1TFRFM055NWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRWWtrSFhIdkVKZWZZb29ZajQyZmJJMEM2TzZVQnVxa1BrbE84MGhOblMKcHBBWnByaFZQTENRaHBlYldZNHlxaXJVbEhSY1UxVS82V0ZLU2lYc2J2WUJvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJaEFPcFZLMkVVRFg5TXB6SVdjNEpSSUFGL3QzWEI1L0NwR2VKbHFadWtDTmlWQWlBQmxIOTJhNG5MCmFvYlBtRWc4R29tUFRYUENvS1Y4RU9WVW9qdlY0dHJjL2c9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T03:32:21Z" lastUpdateTime: "2026-07-10T03:32:21Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved