---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-16T21:47:31Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-16T21:47:31Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-07-16T21:47:31Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: machine-approver
    operation: Update
    subresource: approval
    time: "2026-07-16T21:47:31Z"
  name: csr-zh9z2
  resourceVersion: "6244"
  uid: 78cf1ab1-e660-4e59-972f-dc97692a4739
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=45207475dad0f76701ff15f424b7ab3057f4a99ba53cdff5caad5bcfb06cf616
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-machine-config-operator
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client-kubelet
  usages:
  - digital signature
  - client auth
  username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper
status:
  certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRUW9weTVFaktMZWptQ25Vem1ta0xxREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01UWXlNVFF5TXpGYUZ3MHlPREEzTVRVeU1UUXlNekZhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNamd0TWpVMUxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkxCaE9BMGtVT3dTOWRUUgo2UkluekxIMmRrWUVIcDdmZSt2c0lmTmNsYURnZi91ZGVUQW9sS2RLcFd1RzllQkxwcTRoMCtnNTBlM2ZkcmJMCjZrQTlWdjZqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBYjlaRVZiK1FxcTI0QmdkSjF2bEd0OEYyUTBHLwpCT3pxOFBDOFdoekJhU1hQTmNLbFlZcnNiSWdhWm9yYWkvbWRIQXBYenAxNXQxMUVJNm03YnFSRHpEQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBVW4rK3BoMXJRN25JcFRVbkVvcXV4RjNtRFAzR0Yxd3dWRXRjb2NEeTVTLy8KbVBQbXI0eFkyb3lpSUFFS0p3Wm9XWXJPalNqZjJHRmdra3Y0OGtVYU4reE5JNDNHQk9vR1JpZXFnbW1FdzZJbwo3TXcvZzFnWGI2Yi82UmFMaEszRTMwdVoycEV4eWoyTTBPTlVmTnAreEJBZzdzRjdhZUhLdFhYV0RCbUtYTFQyCmh0aXFydC8zMDdZNlJxVC9XZ1ZGOGE3dlg4Y0JORkFsa0RBWm54dWVrVnJKeFF5V3VaY1gwbW9jTWxsdXMvQ1UKb3NQeUVzUkJ2NHRXY1RtTnJIK1pteFVxbElOdGd6NVZ2dVZsLzZ4ZTdNQlNTYWp4RXhQR2NLMDdGT2RDc1ZpNQphL1FqRVgxQlV5K2VlNU1EdFpYS0wyejV6NlhqZjExeHhMNU4rMDZ3Q2c9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
  conditions:
  - lastTransitionTime: "2026-07-16T21:47:31Z"
    lastUpdateTime: "2026-07-16T21:47:31Z"
    message: This CSR was approved by the Node CSR Approver (cluster-machine-approver)
    reason: NodeCSRApprove
    status: "True"
    type: Approved