--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-09-17T17:26:04Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-09-17T17:26:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-09-17T17:26:04Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-09-17T17:26:04Z" name: csr-d7b8g resourceVersion: "5667" uid: 7c78b140-63df-48bd-a4aa-3d289ae0f7b0 spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=982813ecd8a24f3e7c2f10963b1112485f8411c51f1e753802308906b4b4264e groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF3TFRFNU5TNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFTZHRaUng5NHg1NVRReDQ1TVVZeXhiTGZPVEs1WWQzRm12ZkNzblFrV1oKNGg0UmRwNFB0dWZaOEZIV2lCTW1lT1l3VVZGSGovc2JJM2lEKytyYTVJd3RvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJaEFPMDdXRkE2OW51SmhXNnkxODNtTk02QVBzY0lwRjBUdHduaS9FdkEwTUtSQWlCMEZhWkx4bWhkClFoSjl4R0JPZmI2a2QrdExGWFNwWXdsUDY5bUZpY2Qva0E9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-09-17T17:26:04Z" lastUpdateTime: "2026-09-17T17:26:04Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved