---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-03-08T03:12:01Z"
  generateName: system:openshift:openshift-authenticator-
  labels:
    authentication.openshift.io/csr: openshift-authenticator
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:authentication.openshift.io/csr: {}
    manager: authentication-operator
    operation: Update
    time: "2026-03-08T03:12:01Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: authentication-operator
    operation: Update
    subresource: approval
    time: "2026-03-08T03:12:01Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-03-08T03:12:01Z"
  name: system:openshift:openshift-authenticator-tptl4
  resourceVersion: "5287"
  uid: 681dc546-e92f-409d-9995-e3c347cfdeaa
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=8da0ec11-15cc-4628-9bbf-29639bf74fbe
    authentication.kubernetes.io/node-name:
    - master-0
    authentication.kubernetes.io/node-uid:
    - b4664360-7a98-4e67-95a6-3e39a3e2a113
    authentication.kubernetes.io/pod-name:
    - authentication-operator-7c6989d6c4-zqlnx
    authentication.kubernetes.io/pod-uid:
    - f08a644f-3b61-46a7-a7b6-a9f7f2f7d266
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-authentication-operator
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 0a8d3137-5764-4486-a964-919171602cc3
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-authentication-operator:authentication-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-03-08T03:12:01Z"
    lastUpdateTime: "2026-03-08T03:12:01Z"
    message: Auto-approved CSR "system:openshift:openshift-authenticator-tptl4"
    reason: AutoApproved
    status: "True"
    type: Approved