--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-05-26T13:33:19Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-05-26T13:33:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-05-26T13:33:19Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-05-26T13:33:19Z" name: csr-6s2qr resourceVersion: "5417" uid: da4b57bb-a4a5-4eac-810c-029241bb1bd0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=4459c81f3837739d7f032bde1a2ed8d9a797620d8a43e7e1ceccfcebc7daecb8 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE14TFRJd05DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRcWZjemsxV1picis4NGhsOEFNVjVlVkxwS01hVVdlQklFREpDaFljaGgKM0ZTRlYraGxwWGlLenRZeklia2NWcTB6T0dmWDJJU1FHaGlrMUZBSDZvK1dvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJaEFKU2QwQW9hczJtbkFvblU2MjRXMU1JTnM3aDF1S0Y3dmpGOWlCRFhoRkhvQWlCSTVyYWxKSGFoCmtQOC8wWE5mQnd3dFBwWkZzdU83Uk9mL1M1U1lFRVVseVE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-05-26T13:33:19Z" lastUpdateTime: "2026-05-26T13:33:19Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved