---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-07-27T12:22:45Z"
  generateName: csr-
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-07-27T12:22:45Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
    manager: kubelet
    operation: Update
    time: "2026-07-27T12:22:45Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: machine-approver
    operation: Update
    subresource: approval
    time: "2026-07-27T12:22:45Z"
  name: csr-xdwjq
  resourceVersion: "6242"
  uid: b640006c-57ef-4fa9-90a9-863dd7eda60a
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - X509SHA256=46fc24e5dacaba71ba8f29edd15ddaa97456995fdb2f763a48aa6e2f4b2ade62
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-machine-config-operator
  - system:authenticated
  request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkJEQ0JxZ0lCQURCSU1SVXdFd1lEVlFRS0V3eHplWE4wWlcwNmJtOWtaWE14THpBdEJnTlZCQU1USm5ONQpjM1JsYlRwdWIyUmxPbWx3TFRFd0xUQXRNVFF4TFRNdVpXTXlMbWx1ZEdWeWJtRnNNRmt3RXdZSEtvWkl6ajBDCkFRWUlLb1pJemowREFRY0RRZ0FFVWFpNXVTNVNOcXAvRzlKV3FvMmxxTStiSEYxRlk0elRtekxKYW15OUl3WnkKNXdtMllzY3VTaXAxZUZhYW4zcFlPWi85MExVUHJ4N2NRTUhzOHJrUUdxQUFNQW9HQ0NxR1NNNDlCQU1DQTBrQQpNRVlDSVFER0lMY2s5aXNyQVFleGJaNVFKYnlPYWQ5NGJOZnI5aHBxeVJ5dXJBNnJmQUloQUtIQlh3UWUvSG8rCmF3WWlzbWtWVTJYUk5OL2FPdkwveHBQWktheExraUNvCi0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo=
  signerName: kubernetes.io/kube-apiserver-client-kubelet
  usages:
  - digital signature
  - client auth
  username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-07-27T12:22:45Z"
    lastUpdateTime: "2026-07-27T12:22:45Z"
    message: This CSR was approved by the Node CSR Approver (cluster-machine-approver)
    reason: NodeCSRApprove
    status: "True"
    type: Approved