--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T16:54:38Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T16:54:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-11T16:54:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-11T16:54:38Z" name: csr-gwrdj resourceVersion: "6217" uid: cc47aa24-ed90-4fe3-8ca1-53b39b0d5470 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=010ab30bc971755d13b91f0d3af824237f69bbbcd055405156e93def8be8616f groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRYm45L3U4QXZ2WjlKaEU0Zk9KSVdPREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1URXhOalE1TXpoYUZ3MHlPREEyTVRBeE5qUTVNemhhTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNek10T0RJdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFSGF2NkRVam9kelQ0WStDUAo2amttcUNYSm9vRjYyQXFWZFNmNW5aWFNrYklNaU4zNmFFc1lmTGdmYVAzeGZiYndXM3FQdGx2NStEWU95ckZXCmFkc1NpYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRURvSzZKS1VMMWxMeHduS0hBSGJrNnFtRXVOZ1kydQpEVkRyMlV0WjZ0ZG1NNHZ2THpRSkhnZUx2YndHVytlWlZPYzVqVUtNSDJmWWRTVTJsS3BCN0tSWE1BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUFQNUFoaG13UFpqRE9iakhrb3h2aUdIUWR6OE1yTWtnamtCNDVYa3czcXNkUVcKUG5NZDJkRXRudGVFM2FoQkZNNVRMUEREQm5hbExsMDhIdmlZcmR2T2Z2dS9kc3hpL3RLRFpKeGppc2phWXpVeQo2VG1TdWlQampTOGlobUFTVFR1WURMMm1vWjdyUllXZ0wxR01XUUZpUTNuTXRpYXAvR3M1d1RSRk5hOFQ5bStRCnRudjRocXp4MWlrN1gwWmsvYk80eGtCVlpjQzg1QjBraU11VVo0b1J6NThjNno1dndYMHpsRU5qdFVoZ05FNjIKUDRrNVQvK251SEh0aVFnZmJ0OGJqMlhhbHo3QjZtVXBLOEYxRCtna0dxZ3cwRWxQTHNRTlRaR0x3UnJBTXVQVApGT2lPMThRR29HWFZCalljbVVwdy9tRXdObTIvTXdMKy83WUJBb2UxCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-06-11T16:54:38Z" lastUpdateTime: "2026-06-11T16:54:38Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved