--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T20:33:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T20:33:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T20:33:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T20:33:12Z" name: csr-7q67g resourceVersion: "5783" uid: feaf0e9b-0daf-4057-aa4f-ba3a16b5eee5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4c8ec50af46a3f4e6f5e3b06813a78906cae646042353ec750d2dca50545857f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0xTFRJME1DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTRDQ3T3hockc2ekZ2RGxjUjRNUEl2SjV1RWhjT1BkcVZic1BqcThiSmoKVlBWeXpTdmdlNE5RZ1lxaGI0bGFBZ21BR1RIbTZFNWR5cE9CaDdMdW1ZNFlvQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ09OWDQwazdrcG40R0RGTG0rU2ZKMjB2ckFENzJpdXVzUFhGNkRDbzVWOVFDSUVkK2JVU0JocGlvCmthU25uQWJHQnY1UEFzVFA3MWxzZzJJMS9NS3ptSnp4Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-16T20:33:12Z" lastUpdateTime: "2026-07-16T20:33:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved