--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T06:04:18Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T06:04:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-08T06:04:18Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-08T06:04:18Z" name: csr-l75ld resourceVersion: "5969" uid: 508cc2e1-cdac-4fab-86cf-ac1bd03e7c23 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1bf6836c9cae0ec1f4bb59b4fe94616efd0df3f91c0b37065a8b238adc4276fb groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUpEZlAwK3lYNTFWdFRsMVZubGdWNHd3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05qQTRNRFUxT1RFNFdoY05Namd3TmpBM01EVTFPVEU0V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE14TFRJME9DNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFTcFdkMWpkTFVPMFJoLwpxWXZkVk9qVTU0S3lReUFIaWdoU0NpQzM0WUlEbzZKdlZTRGkxd0k4YXZWbWxVSmlBdmg0YjgzeTB0S3NEQXJhCjlFNTVwbUorbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUVBaR2lzeFljSlFSMnIrOUhCd09aS3dEVnVZegp4aWl5aDVvTHp2czVPVzIzWksyaHBncUhEWEF1OWpzdzBwZHljWkl1NGZCbk1nNENkRkh6Snd6Vkp2TXdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUJRdFdGNi9XRTl3Y2R0YXJkUWdjWFM1ZHNJbFhlcHRXYmZKcTlKQWp0YkwKMmFSclh5Nm5JSjRoaUdDbEVUM25PRGI4MTZIMHNWT01QZncxY2lJL1hUZUFKSEtZeUZRVnF5MGZ3SU5WU1BZSQpITFl2dktnV2hwalRENFdRKzJMcHlUSlRUZG5aVE9YZG94aE9JeWFOMkFXNWQwclJ4RlA0dzdSR2N1Nk1aZmhyCndRSFZnTEpWMll2cjJGYmgrTTJadkp2ei9ReHh3VXlUVzRubEgwdmx5dWtremw3akY2TVlmdkY5MlFrblJCaFQKbjYwT2k1ZzR4OUt1TWZoblZnNm4vZk5JSEhGTG5OVVNHOHZTbHd4NXRneC85ZlB6WmQ0YVpZcWlrOTZFQk1TSwo5dnZ3aDVSdFFJdFNpSXpTOHBTVEF4NGNWZFZySWZBVlE2UGhoY2o1bmRNPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-06-08T06:04:18Z" lastUpdateTime: "2026-06-08T06:04:18Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved