--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-07T16:56:41Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-07T16:56:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-07T16:56:41Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-07T16:56:41Z" name: csr-j7g6h resourceVersion: "5803" uid: 564115dc-185c-4dcb-ad14-82876a7ac5ac spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=f6ca03ae64765e5a305503671612688e0b0d18de7040691d2e93ad8def0c07dd groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUtydjhIZ1RzQjQxQjdvaUlnei9JV2d3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09UQTNNVFkxTVRReFdoY05Namd3T1RBMk1UWTFNVFF4V2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF5TFRFeU1DNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFSWmdUSHRtdXc5eHNBZQpDMGFtb2krY1ZsWmt5SlpCSDQ3L1lVSS9QVmhFaXlEeGxFTlhKNCtkbUR5dzZ1ZXI5MHc5RXk2ajNEMUNNOGljClBsamtpako5bzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUtuTC9hOC9iU1BHTHRQWmgwWHV5K3g5QzltSgpFMElJcVZra01tVDVFTk9FdjA1Z01hak9pMEs0ZTVrS3A3UTBRYnRsT2FIZHcvR2MxVSsrVEc4VmY1WXdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUcxc0tHWWd4QTExOGkvYU5ZOVhDMW1sYjZsV0RzRTlqVm1MRGZmVm4vbnEKcEhYU1JaaGVPM24wcGkrTmR4a28xZitiQk03Umt6cTNKYXpIbmFvWmhnYWh6ajd0MWdIVm1jR3Y5eURwZWhmLwpWSG90SFNuMHRuK0d5aWVEa2wrSnFhVWZWdHRNNmNkVTZpMmJ6dTVndlJYanRSOCtJMkM2RVN4Ti84bGREK3lWClg1R2lBTXpvWHdLdlNBM21pTjYwS0Z2KzJvcCtacit0MDR1T1NnS1p1M1grS2dUS0ZNY2VKMnhxbXk0SDJTUFEKUW4xVzFFNVBhOUFvWVBmTjR0TG5DdWVRSStiSFh5TWpNa3NIeDQ3QktIcFFNczB5V1huLzlyOW8wN2NBd0h5VgpJb3h0aXNyb1lRMUNVcmtLZjVFbitEdTFiUlFsTmp6Qlh6cXUwUWhwMGcwPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-07T16:56:41Z" lastUpdateTime: "2026-09-07T16:56:41Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved