--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-19T02:42:14Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-19T02:42:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-19T02:42:14Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-19T02:42:14Z" name: csr-fr2pp resourceVersion: "5883" uid: 3125b868-f2a1-48e8-8d9d-9562e4366cf3 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=cfb85305cf5cb7d72471ab7d063fe027b2fbf069ab9f2141bea4f39b29f76875 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0wTFRFME5pNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTOHFEQVNkMmticFFlcXJWNkJOQ0RKZlBYcjZKNTBWZDVlZHdvMGEvblMKWkgxQmwwdENsYUcyVGpzWjUxcWJYRXloL2MxeDgzK0Y3SHRYd290eWdTWTNvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ0Q2TWEwcllEYTlINlg3a3JkQi84ZSsrckVxWHZPZUt2UWdOV0VUUHlxTVFDSVFEcVdXM3k4cDBoCjkwZWhkajNYRlVCd2puNmlwTVRhaERVZ3JVM0cyUXp2OFE9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN2RENDQWFTZ0F3SUJBZ0lSQUk0ejM0S3NYQkQwK28wT0gyYnlEV3d3RFFZSktvWklodmNOQVFFTEJRQXcKTGpFU01CQUdBMVVFQ3hNSmIzQmxibk5vYVdaME1SZ3dGZ1lEVlFRREV3OXJkV0psTFdOemNpMXphV2R1WlhJdwpIaGNOTWpZd09URTVNREl6TnpFMFdoY05Namd3T1RFNE1ESXpOekUwV2pCS01SVXdFd1lEVlFRS0V3eHplWE4wClpXMDZibTlrWlhNeE1UQXZCZ05WQkFNVEtITjVjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0wTFRFME5pNWwKWXpJdWFXNTBaWEp1WVd3d1dUQVRCZ2NxaGtqT1BRSUJCZ2dxaGtqT1BRTUJCd05DQUFTOHFEQVNkMmticFFlcQpyVjZCTkNESmZQWHI2SjUwVmQ1ZWR3bzBhL25TWkgxQmwwdENsYUcyVGpzWjUxcWJYRXloL2MxeDgzK0Y3SHRYCndvdHlnU1kzbzRHRE1JR0FNQTRHQTFVZER3RUIvd1FFQXdJSGdEQVRCZ05WSFNVRUREQUtCZ2dyQmdFRkJRY0QKQWpBTUJnTlZIUk1CQWY4RUFqQUFNRXNHQTFVZEl3UkVNRUtBUUducmRqTWh1endsUHJ2eFlDT0N0ZW8vYnFsbApCYmhWdmptRVhXRnE2SE9wMCtPMklWdTExZ1htNXlqbmtXcHEyNEJkZU5wSS9jSGVXb0JlTkNWbitkWXdEUVlKCktvWklodmNOQVFFTEJRQURnZ0VCQUUzalJmQWk3elFkdUZsZldQMzVsbG93OCtudmhRdkdFTXlWK0JNKzJsT0EKOWV2Nlg1NDZ5VzB5Y2tsRzU2bTBpNnM4bHB1eEtPejFLYUlsNXQxNFg2RTZjZDJURDBDVDBOYzZKajZvZnZBZApTM0xFZzB3VU04TU1LS1hONlFzNklwVU5nMy9SSis3Vll0MGlMZFhRdW42Nm9IdHUvZHluZnVTMGtLOXNFYmdyCjFNajE0QVZhb00ranUwQkdzajRPRFQ1N25ZOWduckQrTjF3ZUxqd2RTYThDVzk0YVR3bS9oL2dvQ3dVK2gzakIKc2xuNUhDeXlHdm1lNmd6WjhOS3JTQm1QZDVYSTBkZlVFcG5zaERUSVU5YlQzdDRWL01WSnlGdy85d1ltU3lWegorM1FNeGdOYnJkeUs1dlhnOFBkWk40VzdvMkpUUTZqcGZ0a0JIMUdnZTlrPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-09-19T02:42:14Z" lastUpdateTime: "2026-09-19T02:42:14Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved