--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-15T20:59:07Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-15T20:59:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-15T20:59:07Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-15T20:59:07Z" name: csr-pxcbw resourceVersion: "5593" uid: f35e446d-fbac-4431-a424-604299a8eeaf spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cc45bf10383ee5e34b1bd4d50107c40c494c2323889e497af0087ba1e2eb14ce groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0xTFRnd0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkd6bllpWkxhem1EWmVjZXFUc1owUDE4M003VFZSbXhzSmVpa3ozdk1UNCsKd0xubW1hZ1VpSWJJSkhGZDNiK2dKaG9rZWR0TXdvU3hCQmhybjFWeXNKbWdBREFLQmdncWhrak9QUVFEQWdOSQpBREJGQWlFQThuRUJjQldWTHQvaDNSbDhsRFBqY0xUalpQRFk3N2JPbWdXV0xLVHdFRWdDSUNuVk9Uak80bTQxCjlQNGxsaHFYRFBleTN5ZlRnaGxoN0tGYkRhcXo5dzFVCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-15T20:59:07Z" lastUpdateTime: "2026-07-15T20:59:07Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved