--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-11T15:02:45Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-11T15:02:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-11T15:02:45Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-11T15:02:45Z" name: csr-c22tv resourceVersion: "6429" uid: e4ad54ac-644e-4cc4-977f-1f76a5c5bc8d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=ad80fc318271ad5c545b2e4d28ce7b2a935f268d82ab072902d6d9899a45ed12 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRQm04NkJsTVBoam1yK2tDZWgvL1JGekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1URXhORFUzTkRWYUZ3MHlPREEyTVRBeE5EVTNORFZhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNamd0TVRRM0xtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQk5kR29hdjVMei9oVGM4aQp2Z0F5a3RjNkd1a1dGYjJIOG1KMVRkRzlEY3lXcERBalVEY1ZhWjVZS3BvT053NVpOQ3IyQ3JuL3YvUC9pQjJMCml4bEl1OG1qZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBelBBaXFOa2pTZ1NxN1QxN2FxcU04a1phZGtKdgpnbHhvNkZMVUdRYm02ZXhnNVVMeUFWZEtoZEIyQmJ0djNBYzhzSEU3eHFGSEtjbm4rUGJOYUgzQUVEQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBRTJWbnprdC9HNXZxS0N0U0pFSHFOSUxCd2w1a2x5SHRTRVZ4ZEU4NDIvK2kKbStEOHdPS3FYRFAyNXd3am0rOGZCNzdlc3V2V29rSGhpMDMyeXo2ditkeWhjOERKU1RzMFRFbEw4eU4vSHZIbgpjNEtWV04xYWVVSlR1dTJiWHVYRzI5dXlwOXdsTzZqWHdJbHRnV0FBWVZJWVRTYVFoOFVhMW95cGV1dFYwRHlnCkl3KzVmby9sLzQ3WmlxZ3hrdXNYbHFXUCs5VE45WHlYVmt4dWZhQlN4RG1tdWFBNGdvbkVSVnlMdkkvUjY2Y2YKUWdiMmtjMHRud25FNG9sSUJJdEk4N1dwcXIrd1RxSUhTR09qWUg4OFZIVjR2aDVOS2NGUGdHZFBXdVVxanhnMQpQb2lHVnYxMWE0eVIwQVNGMHJkaGljRklCMjJIMEl0and2WC9peFY5K0E9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-06-11T15:02:45Z" lastUpdateTime: "2026-06-11T15:02:45Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved