--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T14:33:34Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T14:33:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T14:33:34Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T14:33:34Z" name: csr-qdd77 resourceVersion: "5774" uid: 87929e92-9dab-48c7-89a1-6b512f06ae9b spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4c659fac6dab9737613763af72f9371892841af856a6ec978cc4dd7f5fd25565 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRTTNLdzQrN1h2SXdJMGhZNVFwdSs0ekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01EY3hOREk0TXpSYUZ3MHlPREEzTURZeE5ESTRNelJhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekF0TVRNMkxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQlBaeGc2Q01JUFg3RVZOdApxNUh2MjNxanliR0dnRGFiM3BTVENsQ24zUDIxcEtLL3ZNNzdCdWMyQU14S2dKR0FxRXZvMWtoZGsxSUFjNUcwCjFvcnViTUtqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBNG45WXVtYXdPcitnWTJiSUR1SHZpMkZtcUVpYgpkaTc5c0Qrc2gwZzExTVRDdjlLMmhvNHZ4bUU2ejlHOEZzNExsQ09kZGo3NlVUQXorbk5BUlkwSEJUQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBb3FZV0xITVVTN2hLdWRNRTMrZUkyVDRNWlYxWFJoTWMvZ0FZL2prT3RvTjMKVlRydFNORWtMbTBwamJSNWZSUit3NjROUDRrRGx2M0o1dEcwTFRXRk91VjBDR1dZdWloWmFKdG1wdDk1UDIzYwpNYnZRRjEvaGFobTZyZnFkY1BPNXVQbmlQSENiY0lnQ1pwd2padWxMeGxXWTBlK3J2UW40UDdzRVZVbk45ZjZJCjc2U1ppYnZISDVPZXVjT2VoUmF2ZFEyU1QrZHlwWFQveEFOa2JNcjJ2TEdzUVFCOFkvSGlQcm5tR1RRNExDV1QKUjg0WWVKZk00dVEyaGZPcmwvcGk5Si90M09KdkQ3RFRhYnROQ3Rqbm5IekNMZ0tlcmZlcURFWUlwRXgwWUd4aQpPTWxxSUhYRmFkM1NweW13dGZrckt1cjZRQk5wS2dEU1d4UjdsajJLeEE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-07T14:33:34Z" lastUpdateTime: "2026-07-07T14:33:34Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved