--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-09T20:50:22Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-09T20:50:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-09T20:50:22Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-09T20:50:22Z" name: csr-4bzm6 resourceVersion: "5977" uid: da2d79aa-afc5-47fc-b323-38010d145f52 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=130ab61ac8141b2d6f16c59df7bc7b9d8cfb659e1b2964a27b0c38f73bbc78e8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRYmh5RUhUcktzbTRCZ1RlRVhEK0xNVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNU1Ea3lNRFExTWpKYUZ3MHlPREE1TURneU1EUTFNakphTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemN0TVRrdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFWnNsYUlIV1E1WGhQMFJILwo3Q0xaWUdxTXluYS8vaWJ3ejhUYVB3Tm9pcHJ2VFF3Y25Sd2FsUzFrSXRtcC91LzZXVUxLRW1EVFN6cHk5NXJvCnpCVkpoYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFjcGpGQ2lpbzRlbFM1Mk9CUXNqZUN2enRSRVVDcgpqMEVDcHdjeFlwYXZsbEdNOWdrVHVlZ1c4R25TL0dncTVlT2c0NUVqU3NTZTFRanFRTTVyTTgydU1BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUJHaTg0YlBQSms5KzM3OSs1NGR3WDB2Z3FIZUxXaWlpWXdjKy9WeGQ5WlhtOXMKSEJFZEZZSy8wb2tLcERSR3ZQOVhNUVFuV25rR0trOU93SHVTd0ZUbjVJQitZaExrZWhRRVludnMrUGJqVWdHQQpmVkVWdFFtRDNNSTQ5eTV3U0xkMlJOSHlYL0pDNmI0NmUvdlNDR01RN1JrekFPL2dCUHJ1T01LWHkrUUREb3YyCkZQUmtEanA0Zm1JMHVjUlBSZk5WMTM4c3IzQ0FHODkxakZpZWo0Yk1kK1ViODlkVUgwTGpHWXY0T0VwZEt5NVMKMnpjVEJQVDh2RCtHdWNsYXdWbEJJOUt3ZEkzRTUrUTBWQU9BNmRENmlKK3dlMjdwMlQ0YWFOT1dBcmxaaDVBagpGWE1ET3A5TW9ML1pkaVc4cm1mU216ZG5zdWtPQkVWOGoxdUJIdXJmCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-09-09T20:50:22Z" lastUpdateTime: "2026-09-09T20:50:22Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved