--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T12:57:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T12:57:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T12:57:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T12:57:33Z" name: csr-m5j2g resourceVersion: "6602" uid: 74e30bb1-165e-4680-9197-cebc76cd689d spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=d9e70291b9abba73fbe41f7a4c4e0519cc1c9b20d4dec758dbf38cb55e743116 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRRjZ1eTJSek5ENmpzUEtGOFlMbDAwekFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBM01qQXhNalV5TXpOYUZ3MHlPREEzTVRreE1qVXlNek5hTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhOREV0TWpRNExtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkxGZk5aR05XUlRlR2o3SApadFV5dTUrRTN6QWlGYkFQVGtyeHhVV2pTVnR0YWpBa1N3U2UySk96NFl4bmVRWWN6QTNGZUdkRXpsRTg2a2hpCnR2NHJ2UkdqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBSk8vUnNxWWU5MXdxdDM0M1Jnakhwd29icDZxRwpSdThwbjFEaDl0eHVwL3BMQzhXcWZPcEVOSVM4bVM2eWhnQ1RjNFNMZmxuY0RWOVhGOTBVQjdJUEp6QU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBWloxb3p3dEF5Nkh4Q2VyZ1BlcWVVNnZQd0VEZFd3K0U5MG9Bekx3TTRYOVQKUmtZdXZpT01pK2puVElqL0d2eUtWNWdSWmMxcUcxcElDejZNNDNRckQwQlF6M0xBYlZab29kT2VlbmpyNisxYQpjQ3ZwblFPYXc2dnBFeGVuMFBsMVJJbEU0VDNTeUtHSXhrbnNMNE9ZVmJRYkdBV0JmM281RUZxVStxNHl6QytYCndzVGY4ZlZkeldUdTVZem9yNVZvTnQwbUxEbTNCdGFzQkh5NGlmQjZBeFJJU0Y4TTBYclE0VVB4NmFvK0tzRTcKOWhpcElXdndpWDg3dGJCL09MM3dsbmVvRm1Ca0lhOUtxTWwyWjZ1MUtJaC9GUjBielVpZm9CRGt4dy9ZQ1BaUgpCZ09QQktucVd5WnFiOWtPbTZrVk9xMWo4a0M4WEpubmUyRmNRSCtQSWc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-07-20T12:57:33Z" lastUpdateTime: "2026-07-20T12:57:33Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved