--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-22T12:54:12Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-22T12:54:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-22T12:54:12Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-22T12:54:12Z" name: csr-lltms resourceVersion: "6106" uid: dbc98e94-349d-4186-b8fc-6b9a96d52311 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=451eada9363d7dfb15e1d3548924208387b004cd66198d9e89ca4b03df1d6572 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRZVoxUHNqYkNGdmcweVg5TndKaXRCakFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qSXhNalE1TVRKYUZ3MHlPREEzTWpFeE1qUTVNVEphTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREV0TVRZeUxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkIxS3Z1QnVkYTFzS0U5QQpGL3BJZmNONHphellTOFBsTFZNZnBGaVNrYjhkWWxMajMvRVpFUWZZS1htZkxmZEpwbEpDWUFzS050eHZJM1kyClBYdWxCVWlqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBOGUxL2JpTGQ3ZE05WkR6VlExREQxQVFFTjl0cQpubmQ2ZWVLQmYyRERGdElMSW9wNE1ZYy9pdm5KUTBMMUhReU1pZXNBd2V3d2JKWnU5a2JTZzB0bjB6QU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBQTdwczdIK2F2TXpqeHZmd0UybWJUMHB2RncxTjNpMFphVTJ6bXpIdk1VS3AKTytYaHRWVVlsM2E4eE5GZlhWYmZwZ0pNUzVvQ2dPRmhwNkcwSlJ3TlBkV1NBVXBLejBQWGYzZWtkb0ZLekRHVApHakxDMGt6SE43S3o3dU5OMTFuMjRKVHY2VW51YnlLQytFQ1FsYTdEbnd4OVFnOEhmYWI5UzI0M1UrSFh4NDYwCnFkUFc3cm9FVXMyZXR2aXAyc2VlclhiOVhvNDNnaTI1d1ZibnZLTVh2YzlCbDBYVCtsNkxtYVRqM1E4Y0pncVMKWDRUbzROQ2ExZ2gxN2ZEbjZVclc5bytkUm42NjMyTTE5VUFZTm11VVprbVpBSlV3WURtSGNlTEwzblRUUC9JZApzZzVyNTc2MlNBaTkzZGxmRDZKaVFBU25NTEJ1R0REWnRHY2haUkFEMUE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-22T12:54:12Z" lastUpdateTime: "2026-07-22T12:54:12Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved