--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-02T20:33:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-02T20:33:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-02T20:33:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-02T20:33:02Z" name: csr-4jchm resourceVersion: "6121" uid: 72510c04-3018-43a9-985f-9bf92b313a69 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=908465ff73a0e7ce118e92f7427418a86d198425057474040b6fc47b7784523a groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRFeE1TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFUVGxISHBxdzBPYkRBTzZRamtjTXp5SVJJZTlwcWdhQmRxbzB2Sk1qbnQKRVk1T095NndEeGl0YVJ1dnJnRFN3WThyRVpGdERvUWRGT2JlL0MxV1FsaElvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ2RJa01wckF4TndsZkJmeXhaKzVPdmVjUnlsUVd6NzlLcDBsZkViRFE5L0lDSVFDa2JsVzArRUJZClFYSGVGd0Ntb1JQc3hIanNHN3FwR2lPcEhneGtCSEl0K1E9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-02T20:33:02Z" lastUpdateTime: "2026-07-02T20:33:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved