--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-13T17:17:20Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-13T17:17:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-13T17:17:20Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-13T17:17:20Z" name: csr-c287v resourceVersion: "5886" uid: 012e017f-3674-433d-9ac4-69046e0f7214 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ab1c3aa9c83f4672c164d17c1d5a1e1d70a6655c30f0115e1541806ebf206bd3 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRFME5DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTVk1ISmYwQkZvUStQK1VWWVJveDlldTVkMHdBdVNPOFo3S0NIOGdSVzcKamtzNmhrVTVzWEFGMFlXRlhPdU12UGFnL1BxemIrMHo3NjY4d3UvUTBTVEVvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJaEFKR1hLamRhT2VMalNmcGI1aHhnR1ZzNlJ1SzFoV01qUjhHS01ZWXhoS3pDQWlBR1laVzY4VmVKCitWQU5tUjhRV3pSTWIrKzdoZGYzeW9ZWExwT1YvVE9kb0E9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-13T17:17:20Z" lastUpdateTime: "2026-07-13T17:17:20Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved