--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T08:22:02Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T08:22:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T08:22:02Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T08:22:02Z" name: csr-g4ljv resourceVersion: "5840" uid: 065836f2-7555-4cb6-bf70-8fa5c6f7b8f5 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=1d43095922d0a87a4514cd32cf1a77d2f0b26d7c6a10ac84c26e38571ecfef4c groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRJM0xtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQkgwam9WbEsvdElLRUEyZlZ0ZG84T1hpYlNDc2xkQzdFYk1TMFdwZ0NzM0IKd2RIL2FndloraXVia3lDT3lDQ0xOZ2dZSC9KbG90QllLK2ptdUdBQ3hwS2dBREFLQmdncWhrak9QUVFEQWdOSQpBREJGQWlFQTAzTitmQ1pjVnYwZUZDWjZTeTRXdyt1Y1BmdWZIdnBGNndYN1A4ZWR1MVlDSUhZbkNKYXRydHBWCkt2RXRobkJHNlFuWFpYZ0Z5WjJoREdRZEFIMHZyRFVVCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T08:22:02Z" lastUpdateTime: "2026-09-17T08:22:02Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved