--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T08:21:49Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T08:21:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-12T08:21:49Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-12T08:21:49Z" name: csr-fzl2n resourceVersion: "6502" uid: 98fcc6f1-ebff-48da-b7a3-56c8b99255a2 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=6ca31b101db9004975d4426ed06f26f88d1771d2c166ce6627dac73df33b9c47 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJqQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE14TFRFek5TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFSNE5HRmZXeHBuMHhQbTVTY0xQSmJ0OFlNREwxQmk3R01RdmhRekdyYXgKL2gwZkRoRklIcGlCUTJoanE1enVzanlTQXRUMzI5S0duQ2hoSnc1Q3MxMU1vQUF3Q2dZSUtvWkl6ajBFQXdJRApTUUF3UmdJaEFOclpsK2QzWVVtcUhCSjRzU0JTeC9RZHRpYU5CdjFzWDcyZGdKRzNJSWVyQWlFQTZVakxvd1FOClEvTUVVZUtlMmY2M3hHVjByS3VpdU1INnNQeVJkZkpBTWFFPQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-12T08:21:49Z" lastUpdateTime: "2026-07-12T08:21:49Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved