--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-09T14:02:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-09T14:02:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-09T14:02:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-09T14:02:18Z" name: csr-wjgh8 resourceVersion: "5803" uid: e83d9b2e-06bb-4e25-89c2-a5658e591404 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7be85086b4d1e2f494564769c8f57de178820e984b12cfe585f4739fadd5856f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRFek5DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSU2dGQ3lUcVVQNDMwZlhLQTFKVXVqalBXU1NkUkQ4czNPTXFVVFRiOTgKa0VtRFVIaWVpRTF6LytuWDdxT3FmcE9BUFo4RE9RM2Nud0Z6TmtoVmtNMWxvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ1RIT1NleEdPek1aMU9sOXIrSWpjNmNyWWV0ZDN0a05ac3FHVlpGbnI2azBDSVFEOFZkUlFmVmJVCk1ONStuVkxacWZIVjZuZTJZMVNaNUhQWThRMDJoOXpHMVE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-09T14:02:18Z" lastUpdateTime: "2026-07-09T14:02:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved