--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-18T09:52:28Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-03-18T09:52:28Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-18T09:52:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: oc operation: Update subresource: approval time: "2026-03-18T09:52:33Z" name: csr-smg9j resourceVersion: "2321" uid: c457b323-d64b-4046-93c5-328ada43b1b0 spec: groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-03-18T09:52:33Z" lastUpdateTime: "2026-03-18T09:52:33Z" message: This CSR was approved by kubectl certificate approve. reason: KubectlApprove status: "True" type: Approved