--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-11T13:04:37Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-11T13:04:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-11T13:04:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-11T13:04:37Z" name: csr-vvkw7 resourceVersion: "5701" uid: 9253e179-3b37-4911-96d3-717fc1fae340 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=42ef28649a96d7c157728a8bec0afe1a3d6d60d7823f47777ac0c06acc4443b2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRjNUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk1ZUVhVQnpiTVF6NFpld3ZmQkwwemY2dk54NlQzRU8wVlZOSVFBbzF6K3gKbEp1cG5nL3NLeVVKZm1KTFcwcWh6WHB1RnE5TjJpZGhjTi9Dck1VOE93cWdBREFLQmdncWhrak9QUVFEQWdOSQpBREJGQWlCYjVRSGR6UVJPUlpCbXBlY2FIeTRwTk9lRzVEVStUd2c1THF0bXQyYi96QUloQUxpdzBkekJkSmlNCm5jY2lBbXBQazRZZE96bVdkTEJnN3JIRFR1TmxCcDNZCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-11T13:04:37Z" lastUpdateTime: "2026-09-11T13:04:37Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved