--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-04T21:53:24Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-04T21:53:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-04T21:53:24Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-04T21:53:24Z" name: csr-l4qtc resourceVersion: "5773" uid: 43c79df1-1a42-4909-8f73-683544519765 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=0958af7b176412a6ce4b890edd60818996d9d4d47fa796de94b5e893a4bb586e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRZeExtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkhRaWNRMDlVWTNua0JUTWxFZVBhdTZPd2ZqZlZyUFVXdkk5enRVSnZZY0UKdzBLSS9EQkRTZ1BrbFV0YStzYjhQT1o3MXVCanFRcENzMVJ0amxURDhnU2dBREFLQmdncWhrak9QUVFEQWdOSQpBREJGQWlCY0xNY1RHc1BEU0pXNkJzN2xrN1RnUG9iOW15NmxDUitIbGtTNlMyOUpUUUloQU4ybXNidFdSdWNwCkJBWHplc0xCa2Q5dVdaUVRYUTFxelBHZ2E4ZUl2cHZHCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-04T21:53:24Z" lastUpdateTime: "2026-09-04T21:53:24Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved