--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-10T14:30:55Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-10T14:30:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-10T14:30:55Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-10T14:30:55Z" name: csr-6sb7r resourceVersion: "5638" uid: 0f3948b4-1aac-4bd5-8521-f70494657ee0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=65ac3fc08d9f6b8c3f86c178aa4f4d3a78c13d9b2594374da56e5ac5911b3c20 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRNMUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkx1VVN4NzFIY2JKR0tBN24xTFFteFVyRGhqYTJlN1o5dUNBV1JrcGFsQlcKNWdCbVZaYStXZTBJR2lRWXJYc0xIZE85UUJOSytyQ1B3bkVaRGswcGlmS2dBREFLQmdncWhrak9QUVFEQWdOSQpBREJGQWlCQStEbFJVTWlKTDV5UVRub0Nkd2xFWGRzNndJUGdPNC9BRDBuVGo3cHI5Z0loQUtRcGxscUtydEd6Cm1odnlMQ1prbXBPaXpJVWx1M0s2Z3FZd3ZkSS9FQm8vCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-10T14:30:55Z" lastUpdateTime: "2026-07-10T14:30:55Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved