--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-01T05:42:53Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-01T05:42:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-01T05:42:53Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-01T05:42:53Z" name: csr-d7bwb resourceVersion: "5764" uid: ff4e4bf6-9fde-48d7-a447-ee91cb63dbcb spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=719802b35480d1ed3ed47d411805bcaf9e0b56231d7265614439bb6bff36c565 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJUQ0JyQUlCQURCS01SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14TVRBdkJnTlZCQU1US0hONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVE0zTFRJMU5DNWxZekl1YVc1MFpYSnVZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRbUwrVmlVTzJ2dytIMDZldngrWWFWU0NydzdqTng4WmFVeDNIL1dlL1AKRkU0Z0dHTUNoQUFDQTJQTXJxYmFkaXRaSHlXenJxK2xiYXc3LzVVdlgrZXZvQUF3Q2dZSUtvWkl6ajBFQXdJRApTQUF3UlFJZ1Q5c1dXWGMxZXdaZEtQWUdmTnpINDNmbGdoQ09kOC9Mc2RPNExPaFViTzBDSVFESDVBM0hRenZ5CmRkRjlUajI1MFNBUUFZRFdBdFc4L21hTVVrdFRRRk15Vnc9PQotLS0tLUVORCBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0K signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-08-01T05:42:53Z" lastUpdateTime: "2026-08-01T05:42:53Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved