---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-02-20T11:49:29Z"
  generateName: system:openshift:openshift-authenticator-
  labels:
    authentication.openshift.io/csr: openshift-authenticator
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:authentication.openshift.io/csr: {}
    manager: authentication-operator
    operation: Update
    time: "2026-02-20T11:49:29Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: authentication-operator
    operation: Update
    subresource: approval
    time: "2026-02-20T11:49:29Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-02-20T11:49:29Z"
  name: system:openshift:openshift-authenticator-dzkr5
  resourceVersion: "4554"
  uid: 0212db93-b613-4566-bdd9-2189bac4388b
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=ae5d1df2-2d82-42e3-ba76-eca4b03066a5
    authentication.kubernetes.io/node-name:
    - master-0
    authentication.kubernetes.io/node-uid:
    - 51b0ed2f-7236-487a-afb3-d60cce1796f3
    authentication.kubernetes.io/pod-name:
    - authentication-operator-5bd7c86784-vtcnw
    authentication.kubernetes.io/pod-uid:
    - 6c3aa45a-44cc-48fb-a478-ce01a70c4b02
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-authentication-operator
  - system:authenticated
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  uid: 6e71161d-afb0-4f33-92ad-2b324bee7ed8
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-authentication-operator:authentication-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-02-20T11:49:29Z"
    lastUpdateTime: "2026-02-20T11:49:29Z"
    message: Auto-approved CSR "system:openshift:openshift-authenticator-dzkr5"
    reason: AutoApproved
    status: "True"
    type: Approved