--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-07T19:01:15Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-07T19:01:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-07T19:01:15Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-07T19:01:15Z" name: csr-f9g6p resourceVersion: "5905" uid: 6a62f7d2-5d65-40cb-b4a2-75cfe51b3bbf spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4463550bf3d89c775c4109feaf0e74653b3e1224ad153c279cf53bc5bbca8129 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkFqQ0JxZ0lCQURCSU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14THpBdEJnTlZCQU1USm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRndVpXTXlMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDCkFRWUlLb1pJemowREFRY0RRZ0FFc3hGamk5KzUwYm1FTEhiN2xnWXJHTDNXSGV2dENzUC9aVCszYVJBYUZQc3IKZEpWUzlYbmJMY2RmczdFcHVjaVpUNU1OVy9keUlaaTdFSHRsano4eUZxQUFNQW9HQ0NxR1NNNDlCQU1DQTBjQQpNRVFDSUNGdVRtYWhoL0M2U2xVL21CdXlLOEpQekV0cW9xSm9OUFQxV29GNGVpVjJBaUFrN29IOFIyR0JkNFBRCitqM1NVcFk3UFdjUm1mUmYzL2hTRzBRSDR4WmRMQT09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-07T19:01:15Z" lastUpdateTime: "2026-07-07T19:01:15Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved