--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-20T20:48:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-20T20:48:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-20T20:48:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-20T20:48:36Z" name: csr-gdb8c resourceVersion: "5410" uid: e64893c0-26c7-4733-bf75-d9febf16581a spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7b4d8daf37dfe4e48653194d5511a802314baecbbbd635c6a7a4035fb05ba23e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUpicXFYV1VvVGJ6MmRUMEx6SzVIUDR3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd05USXdNakEwTXpNMldoY05Namd3TlRFNU1qQTBNek0yV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE13TFRFMU5TNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFRNmJJbkFmTk9HbFRWbAp4Q3JyOFhiSm1TQndjL0VCZFpyZkFKTVRoTlE3MkFNNEU4WnhLNEI4WjBYK3h6OFhOaDk1ZTlBRHlrRlc2RHNrCnRKZFA4bUFobzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUU5Tm9TTmJJZ2M0b3Z0dmRSM3lCRzFXU3A3cwpsNWdIWUpzcmFsb1EzWjFQNGN3WWZEZFFkMDh0Mm1GTzEweEFCVUNkVHhjZS85SmprYWFib2phdEp6d3dEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUZqeVV1K2JsQytUa2ROeXpsZUMvMkpoOEt0dncxNGxKZFdYbVVCTUpmdnIKS1c5bW1kS2hoV05jZGRMSlhaS3pKZmJPNUJFRnNDMGZOdWVyRm1JWGg4c2twWU82MklwVm9WQVFYZHVkd2ZsWgpESGo4dUF3cVVKazE4VzlyQVAxdzBrOVRvTUdWcWlxTFhOekZjYkFMZzROUTUza3FPQndlME1BM1h1OG0rNkFMClZTWGpXZ2ZhQSttMnQ5Mzh5YmxmTS9mV2E0T0Ryc2lhUExBc2xWS2xNdFV6ODQ3b2NPb254SU56MWtWQmhnWEkKNWVEdzNUSUhlT1pGRk84OGNpVFJmbGxZRWJTdWhmTkpRanFYUExkbVRtMDUwZCtVa29JT1Q2SFlYTW9wRHdnZQpHeHc0UDE0c2I2a2ZhbHYyZVhQMFhET0YySG9mTWxrNUxXNEQ0eHMxZmFvPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-05-20T20:48:36Z" lastUpdateTime: "2026-05-20T20:48:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved