--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-12T18:30:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-12T18:30:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-12T18:30:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-12T18:30:55Z" name: csr-d8fvp resourceVersion: "6490" uid: 4c46d420-e4da-42af-b212-406ed44efa61 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2ed66e39cbc02b75a27427c3be79f69c8dc7c40d865db696a0e1d96592a44af6 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRFMk5DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRTnUxK256ZTF3YVFFSm9VR05PaW5ndW03bXFTOTVPU2gvTU0zQ1FtZjMKNmdTd3pyU0NUREw4QUl4ZytCM0ZUVVZiMHQxRldhanhNRGRlWGdvWHhQQlhvQUF3Q2dZSUtvWkl6ajBFQXdJRApSd0F3UkFJZ2R1UHlPS0xPTUFxWkR3cFVSY0ZsclExTFFhYlp4TGRyeERoWEdzejFWZmdDSUROUmw4RlgyRXZJCklwV3JzQ1R6U3A5Nlhvb0VycEhpK2VWMmtLVHNiY0RVCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-06-12T18:30:55Z" lastUpdateTime: "2026-06-12T18:30:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved