--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-08-01T05:42:59Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-08-01T05:42:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-08-01T05:42:59Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: machine-approver operation: Update subresource: approval time: "2026-08-01T05:42:59Z" name: csr-l4bff resourceVersion: "6014" uid: d0751b4f-d0d2-48f0-9b8e-fbf7c297e49c spec: extra: authentication.kubernetes.io/credential-id: - X509SHA256=719802b35480d1ed3ed47d411805bcaf9e0b56231d7265614439bb6bff36c565 groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUN1ekNDQWFPZ0F3SUJBZ0lRYnNxVVFPOEtFeER1MzRtRzgyM2NTVEFOQmdrcWhraUc5dzBCQVFzRkFEQXUKTVJJd0VBWURWUVFMRXdsdmNHVnVjMmhwWm5ReEdEQVdCZ05WQkFNVEQydDFZbVV0WTNOeUxYTnBaMjVsY2pBZQpGdzB5TmpBNE1ERXdOVE0zTlRsYUZ3MHlPREEzTXpFd05UTTNOVGxhTUVveEZUQVRCZ05WQkFvVERITjVjM1JsCmJUcHViMlJsY3pFeE1DOEdBMVVFQXhNb2MzbHpkR1Z0T201dlpHVTZhWEF0TVRBdE1DMHhNell0TVRRMkxtVmoKTWk1cGJuUmxjbTVoYkRCWk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkp6bmpYejVXaE1RL3Fkbgp3aXRZamp0QkN2dHpmbU5BdEhVcVc4NEVMR0k5K1dtUzUveFE4c0hWKzh6cG9URHFqRHNxT055dk9iUjQ1bkRsCkVyT1BrSnlqZ1lNd2dZQXdEZ1lEVlIwUEFRSC9CQVFEQWdlQU1CTUdBMVVkSlFRTU1Bb0dDQ3NHQVFVRkJ3TUMKTUF3R0ExVWRFd0VCL3dRQ01BQXdTd1lEVlIwakJFUXdRb0JBcmJuWTdMWmxaQ3pPZG9DeS9YcS9wdFBKbGlHRwpZKzZBTU96VmE0QmlLeFRzUGVvclpNMWFoOG1vZ0Vzbkw3NmEwZk5UZThyUHo2QUYwVWVYWDVtUDhqQU5CZ2txCmhraUc5dzBCQVFzRkFBT0NBUUVBbDF4NkNxM2hZdnhTZGJMWmFrbG9ObkNwOVdjbjlEZFZkYXZwNW1zbFF1ZHAKTk9HdmRTTnNJYVVNTThOQkxDQnJYMHZydHNJaGhweXRWd1RyNU02M3lwV0pkSkhoTktuRGF2cFJCb2hQbVhOdApRVnM4eWRKWkt4NGFFVDQzKy9hdnFDV0ZPWDVhZ0Q1Y3RMUWlXbUMrYU9DQ2F1Y25XaVZHRnB1S1hSNGdUNk5iCmFFTjRlYTR4d1o3M2JRMmc5Q3hrVUVBNGxGODlQT0FXdmErRm1IRkpqMmhpR1hpNmN5ZWlkT1d0RHZrZ1MrdmkKWUZraGtJSytBQXhWM0tPWlJwU0JyWFlPR05rSTB4c2kxTkZ2ZTlxQ3pYYkpOT3V1RkVTbktTOWtuKzA1Mzk1WgphUEtPZkQ0dzQ3c1RjTXF2dFh5Wk9qVllyUGR2V2VVL1pFQ3dpRk1sb0E9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== conditions: - lastTransitionTime: "2026-08-01T05:42:59Z" lastUpdateTime: "2026-08-01T05:42:59Z" message: This CSR was approved by the Node CSR Approver (cluster-machine-approver) reason: NodeCSRApprove status: "True" type: Approved