--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-12T16:25:01Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-12T16:25:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-12T16:25:01Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-12T16:25:01Z" name: csr-mj7rg resourceVersion: "6430" uid: 0ff45e07-4b44-4c50-b60f-33ff33efec0d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=e030103d7e148d696378b325b3e4567e90a941815a5126b744d1620a97f17f03 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUpBWDdzdHRKL05mQnp6aU1iRWNlRTh3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd056RXlNVFl5TURBeFdoY05Namd3TnpFeE1UWXlNREF4V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0wTFRFeU15NWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFTZE1zSTFWd29INDk2UgpCejlIdUxlNlRpSU5pUnF0M1hKb0MrMkNlVTRrRkpuSFAxTHVLeDIwTEduQVE3NFM5cTVRTWl6cXV3YjdtQ1lDCnR5dlZSM0NWbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUR5YXlxRVVNaGVHV2l3OENQSnhCU2NZYlJkTQpyTTJvbVNRQy9FWmcxclBkeGdHdUFzem1CK1ZJMGVONFlQOWpoYmkwVERwbGdIbXlZdVc3SGpyNGlad3dEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUxvYzVkUjFBdHcyMnAyUDNpUHhqYjNZS3VQZ2hqcUZzcXJwUDlOU2tnMi8KMFZ4c2dlQnlwVTZpS3U0cjZvbHFWK1o5WElIaldscVdSK01ncXB2QkhJY3drZ1FrdXd3bFBZZ21XQmpPN1ptNApjOVF1dlhtSUJLTGtYSVRkOUVkRGljTzRrTjJ3VU9rc3FJMlYvaEVVenh6eTBITmRKQVRzTzRZZTNLeTV0aEEvCktJRHdvZzBUOFA4ZXFsTENyZ3o0dzZQZFNPOTdSd05oMUF2WVpjdWJ6VkVCMnlrVEZVRFZvUFQ1WEVLVlphM04KTlVWSWgydXN6NEJ5aTJUQVJ1SThIRFlPcnV3MytSclc1ZTR2NTgyTFdMQnR1T2ROdEFRZjYzNExHV1c5SHlnRgpNRzJtMytTL1NjRUkzQTRJL2kxVzdmZG9sQSttaG5VQ1VBa1NaaDd2ejlzPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-12T16:25:01Z" lastUpdateTime: "2026-07-12T16:25:01Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved