--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-14T22:20:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-14T22:20:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-14T22:20:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-14T22:20:14Z" name: csr-2mvf2 resourceVersion: "5797" uid: 2fc07ad3-a749-48d7-96c7-2f32626014f9 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=b76680161f14c416e1244b07fcfb940b71a180208d70a0059ebfed4750f7799c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF6TFRJeU1pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRS1NMREdOd2UvSFJicXk4dEEyQ3ljYXVRYmZ1cnhXMHREdWhPMGhma3UKMUJvZG1QNUZrd0Q0em9ybnNINytnVVBWaEtyMG9IUEJUVlhIQWVmbkxhOTdvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ2ZmcXhXT1BFOTRoNlRSSTYxdUtTUzdzZDhaWkowTkV5Nm0wZ2ttQTNNU01DSVFDVURwcGJLSGNECmkrZkFkK3VOM3ZBQmVLbmtIWHEzWmNrVkVXbFhQSUFSV1E9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-14T22:20:14Z" lastUpdateTime: "2026-07-14T22:20:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved