--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-01T18:19:46Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-01T18:19:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-01T18:19:46Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-01T18:19:46Z" name: csr-d6jmf resourceVersion: "6422" uid: 4fc4aa3a-e93b-4a1d-a771-08927ee06c01 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=7ed11e717b948b8a1481f22a5da312ce72dc25aa7e09878178fb3424488d1ea4 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRVm1tUkFBVHNNb0ZCQ3F3bjVXbU1BREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01ERXhPREUwTkRaYUZ3MHlPREEyTXpBeE9ERTBORFphTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNelV0TXpNdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFSHp2TnUxR2hpc1VZeEdodgptVktJZ2gvRlBiS01DNXJRSS9YcVdXMzRyNTM0VXVEcmVld25JdEp0QUozWVpqOXVEVmpQTDBkdEplWFJ2YVNkClp3ZHpFS09CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUFSd3JSeG91TGJvaDUzNzJpbHFWN3ZPR21FbG1IRQpncDlLMDFlZHNMQzhYWWlLK1JLNld2UkUvN29GbmVWd2ZvTlNhcDgzeE1rRUE5NTRqc1VvTGRLc01BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUURHTlFoVnR6MUVickNuWVRjSHlpY3pBSDBCYjdvemZkZ1lzUmI0dkRIc2RydnEKOUNTZVB2SG4rRUxOSnNUL0xiRmtvQVR0dkF0blI3ckwrMFNjTkZCME1wM2F6a2M2M1BybmVvTzFnTS9kVHZaRgozS2VIWmtrQWRaUU9Kc2tjTnhPL3RqUUJlZkd3K2cxUTdhOEtxYlgyOWIrcVBkeGI1RldhZ0xzMFVGUjl3cnVGClNxWVFLZ0pxbW55UmhRL1NJUUdSY3FjcXVteTA1Z2hSY3BvSFBJTHNUTlVZVElkZGVPOElKQ2VkaitrTitBOEUKd255SW9JRUdVRkZJMXJyU05ZYVlHZDdZZG4yYVFhc2FSb0V0TXk3bys1ZFFldUxwSjhITUpIMjhBNHF2RTJYYQprTXhWM1lsZE42cFZZd1pURTVqYmtmVTVEZ2ZoZ0hFRi9DVDBFSEdBCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-07-01T18:19:46Z" lastUpdateTime: "2026-07-01T18:19:46Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved