--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-02-20T11:47:33Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-02-20T11:47:33Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: oc operation: Update subresource: approval time: "2026-02-20T11:47:38Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-02-20T11:47:50Z" name: csr-ctjr9 resourceVersion: "2319" uid: 3018bdc2-6ea3-4bf8-aaa5-e6898b4d70de spec: groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-02-20T11:47:38Z" lastUpdateTime: "2026-02-20T11:47:38Z" message: This CSR was approved by kubectl certificate approve. reason: KubectlApprove status: "True" type: Approved