--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-06-08T21:57:36Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-06-08T21:57:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-06-08T21:57:36Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-06-08T21:57:36Z" name: csr-cc74k resourceVersion: "6074" uid: 5b0c9143-b173-4f3f-87d2-f62bc2dcf4dd spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=3613e3bf981dcf00ff20e0290ff03028d997f0bfa1014ad38265cb34fd1b9435 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1akNDQWFLZ0F3SUJBZ0lRU3ZtS1VxaTJsMDcxMmFWaWlKUFU0REFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBMk1EZ3lNVFV5TXpaYUZ3MHlPREEyTURjeU1UVXlNelphTUVreEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFd01DNEdBMVVFQXhNbmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNekF0TmpVdVpXTXkKTG1sdWRHVnlibUZzTUZrd0V3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFcVlnV05SMVJqRU1YSEh2MQordEVFTjkyb2lzdGhZVEVoYmF0UVh5djdtaUpVTjZsdEpWaml5U2xmZDFieXZHallCa2xSK3IraENTWXpTK3FBCmUxdlpvYU9CZ3pDQmdEQU9CZ05WSFE4QkFmOEVCQU1DQjRBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXcKREFZRFZSMFRBUUgvQkFJd0FEQkxCZ05WSFNNRVJEQkNnRUJmYk5KREZualkwdmU1eEMxUTh3ZitVYzM4Z01CbAphMVNZTXhvbG9CM2VNSEZwQ0NsUkdhNkI4SEM0ZnpsNFZ2Z1VHcmpkdGhyWVJtM1pvaktiM21wM01BMEdDU3FHClNJYjNEUUVCQ3dVQUE0SUJBUUNIbkJjcVI3VitrQnhXUlZRL3pEUVMvcEwzQVNjTlROQXo4bjhsRmFXL0F0cmMKVkdtaitTT1N2a1BhNElaUXdBaXhhS0VDRkpqUDY3UGNiZ1BFMDBlanI0R1VCT3B3YmJaWUorS2NJaUp5REdLegpSelVaVE5RSE5tV3pHTzdyMUl2aWhQcXV4bEYyRlY1eGg3Tld2dklKYjEwWVpPcllIMHgrZWFDRWVFd1RjOVdpCm1DU3lDbHM5S0s3RVAxR3QzRTlhbUc3T2MzaHp0bXFuZXpIT0tvOXNjdWNFUyt1eTJqb1B5QWhZeWlyODZrOGoKM2hrc0dwbnVOUE5MSnQ2UW1qdThWR204UDAvZkt1aGNWQmxSeStlOEY3ZHREN0E0cnJyZjVueFVxUVVHbVptRgpsdmZCTWVJWUxWY01wZ1NyY0VqQ29FSXcxd011S24yMld5YTA0UkxJCi0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K conditions: - lastTransitionTime: "2026-06-08T21:57:36Z" lastUpdateTime: "2026-06-08T21:57:36Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved