--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-07-20T19:25:54Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-07-20T19:25:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-07-20T19:25:54Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-07-20T19:25:54Z" name: csr-n6222 resourceVersion: "5661" uid: a44dc11d-b93f-4749-80b9-e10582123353 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=751e31720fb5a1aa3dc6393d0f33a42df477ebe28898b70422243b5dd9645601 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0Jxd0lCQURCSk1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TURBdUJnTlZCQU1USjNONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVEk0TFRjMUxtVmpNaTVwYm5SbGNtNWhiREJaTUJNR0J5cUdTTTQ5CkFnRUdDQ3FHU000OUF3RUhBMElBQk1zcHFLYnRwQzF3OWpmczF2M202VlB0NFlyRW8rVFBCZTMzWjg3OFBaTE0KTjgraXdHUnpQZ0tJdVduTWVSK3VuY0NkN2Y0b1dQSUIrM3lwTk9HMWVUYWdBREFLQmdncWhrak9QUVFEQWdOSgpBREJHQWlFQWhacmxSSmJ1TmZqaEwxTTNzQ2p6WW9ZZHVkdTVFNjJkRklvSUJwS1ErRjBDSVFDOTFJVFpwUFRMCldBelA2V3Y1STRzWVh4U0VIN0ZiZmxjNzBtTFhTd2p5T3c9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-07-20T19:25:54Z" lastUpdateTime: "2026-07-20T19:25:54Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved