--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-21T14:39:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-21T14:39:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-21T14:39:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-21T14:39:32Z" name: csr-vs6cf resourceVersion: "5297" uid: d7203ba2-036d-4e24-842a-d3c7a8c00b7c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=11e1a2c2cfd1324904403357b02d2a180c3de06859c2cd4218de21f62e9639a2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JxZ0lCQURCSU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14THpBdEJnTlZCQU1USm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE00TFRndVpXTXlMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDCkFRWUlLb1pJemowREFRY0RRZ0FFM1RFUnJKV2dmU3hQclJkbS9JeUltcFYrNUQvRXdsWmdqMTJiSnVCQ0wxMzAKK1A2OGpKWGZOdmx1bFdyZVRHdW95aW5GSE9nUnBORDU5c0Y0T3phRmZhQUFNQW9HQ0NxR1NNNDlCQU1DQTBrQQpNRVlDSVFDNS9XL2VpWFQxWCsyd09SMmZrbHFYNTVMWU1WNmdwWDJSQVBPeDRDZzVMUUloQUpueE1UWFdSSHUwCkVpanJ1Qk5VbFVKbnlzYmtQRlBtM0hKdEc4d2dMQmdLCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-21T14:39:32Z" lastUpdateTime: "2026-05-21T14:39:32Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved