--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-08T00:19:32Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-03-08T00:19:32Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: oc operation: Update subresource: approval time: "2026-03-08T00:19:37Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-08T00:19:46Z" name: csr-s42bz resourceVersion: "2295" uid: 08cf774b-bab6-4e41-b053-834af71d2852 spec: groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlIeE1JR1lBZ0VBTURZeEZUQVRCZ05WQkFvVERITjVjM1JsYlRwdWIyUmxjekVkTUJzR0ExVUVBeE1VYzNsegpkR1Z0T201dlpHVTZiV0Z6ZEdWeUxUQXdXVEFUQmdjcWhrak9QUUlCQmdncWhrak9QUU1CQndOQ0FBVElqS2tiCmNjbEdSZklRd3FQRTRFdktRVms2Rk8yR05kd0ZqMzNWdGdsZkJuQXFVdk5laWdxbERFTThwYkZJQ1A4UjZ4TVQKYWIrSWs1STBoQ21mRWhtTW9BQXdDZ1lJS29aSXpqMEVBd0lEU0FBd1JRSWhBSkZEdDZ4Vm1vZTRIa29sNDlqeApBQ2ZlYkZOMFFhL2VoSVZQeUpBUENGeG1BaUFWTnZUMlRBOW5McHNtbyt6ZkxUVWtPam00M0plcURmVk1WZWI5CkNOT3hxUT09Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo= signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-03-08T00:19:37Z" lastUpdateTime: "2026-03-08T00:19:37Z" message: This CSR was approved by kubectl certificate approve. reason: KubectlApprove status: "True" type: Approved