--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T21:36:00Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T21:36:00Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T21:36:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T21:36:01Z" name: csr-xlpmw resourceVersion: "5801" uid: 6fdb3e0e-a957-4cbb-8774-fa9e9b15261a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=a6effc1bd6c9bd0115083578fdac06f6336fa06b9677b269bebc4e361ba8fcfa groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRZVRWVkYyVTNaQi8wTVpJYld4S2ZZREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01ESXlNVE14TURGYUZ3MHlPREEzTURFeU1UTXhNREZhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNemt0TnpVdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFUVFkbGNlYm8zenJlc0ZSNwpYUHE1RFNLTlFqMEwyekFFZE9HSnBOS2N3MzNBM0haSnF5NlFwY0Jqb2dHR0pKSC94MWRNekdHQXpoVFg3ODVLCjltdzRPYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFJeU9xSG03cFdROXc1ckYyd3BkelVkSlFlUUIrcgpvS2Vyd0cySzFscUVLQkxYL3Bneng4eW8veDlxeXhzS0VTc1NlVHZUbTVTcFVwOThTVmNyRis1bk1BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUJvZXhGNk0rTm0wYnd4MXRJUTFWK2pTWFRqVmptOEFVWHJ6UlhtaFpJelNPY3kKUlFvYjMwR3BGbHBGQ3A2WHpFazFQd1djOFQ4RGNaSzZwbDBleWJsZ1VHRHR2Qlc2a1Y1S2JEOCsyZStYUExxbQpJbnlhbVNCOFRwanZndHlQMnJOQnNBREFveTN0YWRFcWJUVVl3bmhKQnE3cGhyTTk1SG9KbTM0ODE5UEpFSjlxClhGYXV1d3FuUUhPcUpmZ1BzenMwRFFMaTEvWmNqdzhIVlp3Z0xHamh3Z1loSGVMUkpSSnRwR0NOWjdzNlNqL0oKQWE3OHlhc2xMaEY3OXFGYjVnMGJ0Qm5GMXM3M2YxcDZKZEo1TGRXRzNSaDhPelhKV0w2MmdCZDlaR2dWNzJHZQo5VEtmK0ZUOVN6L0lRVjAvZHJjVlhON015Tld1N25keDhzbzNWeU41Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-02T21:36:01Z" lastUpdateTime: "2026-07-02T21:36:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved