--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-11-02T11:57:10Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-11-02T11:57:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-11-02T11:57:10Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-11-02T11:57:10Z" name: csr-hh47p resourceVersion: "4754" uid: 157a507b-4f1b-4a7c-9538-486f8532cba8 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d5ac57535a665865a809da3bc080d0be0315c53d615decc45667f1b38d70d1d2 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN5VENDQWJHZ0F3SUJBZ0lRR1FybmRaTWZxdEl2TGQ3M0p5RWRRREFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpFeE1ESXhNVFV5TVRCYUZ3MHlPREV4TURFeE1UVXlNVEJhTUZneEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFL01EMEdBMVVFQXhNMmMzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNek10TVRJeExuVnoKTFhkbGMzUXRNaTVqYjIxd2RYUmxMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDQVFZSUtvWkl6ajBEQVFjRApRZ0FFM3JqQlpYR3c4WTJMRlgrblUrMHRnazV2K05DaXRhWEpUeUNiemw3YXIvK0FjbW5QakloZ0dUeWp6US9RCkJUT2ViZ3lPTmlOS002RTY3UzNBTWdVNTU2T0JnekNCZ0RBT0JnTlZIUThCQWY4RUJBTUNCNEF3RXdZRFZSMGwKQkF3d0NnWUlLd1lCQlFVSEF3SXdEQVlEVlIwVEFRSC9CQUl3QURCTEJnTlZIU01FUkRCQ2dFQS9FQzBiSzJOVQowMFYvQzVscTQxRVREdFRJQm1VUVhWTnVXdTZMM2ZVMjJqS1p2Sk5FbmlDMFVXUU5lQ21lWCtUa1BrYWk1WXEzCkE1TTR4VDgrdkRraU1BMEdDU3FHU0liM0RRRUJDd1VBQTRJQkFRQndMUWwwaldKcXc4cUlpRUo5aS93T2lkZG0KMVFOM2FRVkpNaDdTNFdOcS9PQ1VRQWhDVmRtTWVuRlFBVy9SWXBuRFQ3OEhoSVRwZTlFdU5VWE5DaEgwWU92SgpTdXlRbm1jUFJCVXpSTTdnMGZsdWhRTCtUNjBnUjFnN3MrbG9Tb0RyT2F3aFRJVDlTODdGMC95ZExxeFU4eFpDCktoUHprZ3FQMU56NWRwQlRnM1RhZ2NBemZDZnU0WU1nV3hIS3F3WDlaSUF3aVBuWHJ1UHNsZHFqMFRoNmpwVnMKTFJqTC9CQUVjWWhWL0Vxd0wwR2dEdHdBRnhLZTFZRmZ1RWFiS1R0OHU4YXhnemgzQjkwblRiQW41QUs4UER0bgpkOXpTd04veWFjZitHaTRpM1VsYXBtc2NjWHJyV2paeXVGQ0ZoNXJ0RjY2TmhHYnlMSEZPYW1qUWF6QmIKLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= conditions: - lastTransitionTime: "2026-11-02T11:57:10Z" lastUpdateTime: "2026-11-02T11:57:10Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved