--- apiVersion: certificates.k8s.io/v1 kind: CertificateSigningRequest metadata: creationTimestamp: "2026-03-18T08:46:23Z" generateName: csr- managedFields: - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:generateName: {} manager: kubelet operation: Update time: "2026-03-18T08:46:23Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:conditions: .: {} k:{"type":"Approved"}: .: {} f:lastTransitionTime: {} f:lastUpdateTime: {} f:message: {} f:reason: {} f:status: {} f:type: {} manager: oc operation: Update subresource: approval time: "2026-03-18T08:46:29Z" - apiVersion: certificates.k8s.io/v1 fieldsType: FieldsV1 fieldsV1: f:status: f:certificate: {} manager: kube-controller-manager operation: Update subresource: status time: "2026-03-18T08:46:40Z" name: csr-fhmk4 resourceVersion: "2312" uid: e3ff0ede-bcae-44fe-849a-998d5b3b0b41 spec: groups: - system:serviceaccounts - system:serviceaccounts:openshift-machine-config-operator - system:authenticated request: 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 signerName: kubernetes.io/kube-apiserver-client-kubelet usages: - digital signature - client auth username: system:serviceaccount:openshift-machine-config-operator:node-bootstrapper status: certificate: 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 conditions: - lastTransitionTime: "2026-03-18T08:46:29Z" lastUpdateTime: "2026-03-18T08:46:29Z" message: This CSR was approved by kubectl certificate approve. reason: KubectlApprove status: "True" type: Approved