--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-16T21:09:42Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-16T21:09:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-16T21:09:42Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-16T21:09:42Z" name: csr-9f9cp resourceVersion: "6198" uid: 8057fbfc-6095-4af1-abc1-c5194f09cdb4 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=2b943ddddb9775bc2e4051cded38e4fb5db0f34d2a0bda04321e35073bfd67d8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRZmNDL0tyRGZEQ3FJdmR0cGZMR1R5akFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UWXlNVEEwTkRKYUZ3MHlPREEzTVRVeU1UQTBOREphTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNek10TlRndVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFWXJXUUZZYzVUVnVmZGduKwp2eEVQQjZDeGRNdjFvV3k5WDFGeFpWcnM0SnF4bnJMeVZxNHdVV0Rud2pNVC9MR2RFTGVLTTdJWlJoc242a0UzCitqd25BS09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRURueHgzWlNmQjJESmk1NG81eGg0b1M0VEprUHpTRQpJWlVpS3VCNWlIelJ3N01TZE95aUVIaVAxaWllS0hETUROMFZ2cEQwYkUzaUsxYXluWXgydXRhVE1BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUJRV0FDYkRlM2hjT0haWTQvSFVtbllZT2hjTkgyT2VremZGQW5PeE5UQ09YNE8KNHVibVEyN0VRRFhuUDVTbjViQi9HL3JoRU1WYzJsdFpuZEx5b1BJOGdQU2FwR0JZT0lXUDZMallsMFBZWGRudgpXckZpUTJIK3F1WUZyTnZWTkNodzRiNE50ZTd5UExZYmRpY3BLdmpVWkdyaVIrT2lkd3V2elNybXJWRGJJS2VDCjZKckVjVHdrMG84UXhFVFdhYlo1NTJLTjR0d0dVallKTHRLS2dpWjE2czErZ3hwMUpVY2lqdDVaeGJ4UWxPWmgKMFU3bWpxd0ZNbE1pU25NUDFLQ0w5aHZ0b2NjNUR1SzdkMlVrbTA5YzBoVy9PaFpSZzJSZHNqMVpPL01UbURtLwovWjNPbzhYNkw2K2txOVk4L09KYURnbGxhdWJ5ZHJPeUxYQWdwVDgvCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-16T21:09:42Z" lastUpdateTime: "2026-07-16T21:09:42Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved