---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-03-18T09:54:48Z"
  generateName: system:openshift:openshift-authenticator-
  labels:
    authentication.openshift.io/csr: openshift-authenticator
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:authentication.openshift.io/csr: {}
    manager: authentication-operator
    operation: Update
    time: "2026-03-18T09:54:48Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: authentication-operator
    operation: Update
    subresource: approval
    time: "2026-03-18T09:54:48Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-03-18T09:54:48Z"
  name: system:openshift:openshift-authenticator-sl6m5
  resourceVersion: "4921"
  uid: d0c6f50d-b161-4a44-9fa6-c36be42fd8ba
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=bbb45132-5c34-4311-b1e8-dc7d5e2cf88c
    authentication.kubernetes.io/node-name:
    - master-0
    authentication.kubernetes.io/node-uid:
    - 673840ad-4cc8-4ca9-8d21-07b73732aba5
    authentication.kubernetes.io/pod-name:
    - authentication-operator-5885bfd7f4-4q9tr
    authentication.kubernetes.io/pod-uid:
    - f076eaf0-b041-4db0-ba06-3d85e23bb654
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-authentication-operator
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 6735bb08-be93-4756-8e01-8a648e3bbb60
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-authentication-operator:authentication-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-03-18T09:54:48Z"
    lastUpdateTime: "2026-03-18T09:54:48Z"
    message: Auto-approved CSR "system:openshift:openshift-authenticator-sl6m5"
    reason: AutoApproved
    status: "True"
    type: Approved