---
apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  creationTimestamp: "2026-03-13T01:12:30Z"
  generateName: system:openshift:openshift-authenticator-
  labels:
    authentication.openshift.io/csr: openshift-authenticator
  managedFields:
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:metadata:
        f:generateName: {}
        f:labels:
          .: {}
          f:authentication.openshift.io/csr: {}
    manager: authentication-operator
    operation: Update
    time: "2026-03-13T01:12:30Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:conditions:
          .: {}
          k:{"type":"Approved"}:
            .: {}
            f:lastTransitionTime: {}
            f:lastUpdateTime: {}
            f:message: {}
            f:reason: {}
            f:status: {}
            f:type: {}
    manager: authentication-operator
    operation: Update
    subresource: approval
    time: "2026-03-13T01:12:30Z"
  - apiVersion: certificates.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:certificate: {}
    manager: kube-controller-manager
    operation: Update
    subresource: status
    time: "2026-03-13T01:12:30Z"
  name: system:openshift:openshift-authenticator-vqkm7
  resourceVersion: "4918"
  uid: 4baba895-b689-4799-a291-e415bd7740a1
spec:
  extra:
    authentication.kubernetes.io/credential-id:
    - JTI=d50a8bba-19f0-466c-a00a-e942add63d33
    authentication.kubernetes.io/node-name:
    - master-0
    authentication.kubernetes.io/node-uid:
    - fefcd618-8713-4af7-b827-a8f244b965cb
    authentication.kubernetes.io/pod-name:
    - authentication-operator-7c6989d6c4-plhx7
    authentication.kubernetes.io/pod-uid:
    - b5757329-8692-4719-b3c7-b5df78110fcf
  groups:
  - system:serviceaccounts
  - system:serviceaccounts:openshift-authentication-operator
  - system:authenticated
  request: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURSBSRVFVRVNULS0tLS0KTUlJQkREQ0J0QUlCQURCU01WQXdUZ1lEVlFRREUwZHplWE4wWlcwNmMyVnlkbWxqWldGalkyOTFiblE2YjNCbApibk5vYVdaMExXOWhkWFJvTFdGd2FYTmxjblpsY2pwdmNHVnVjMmhwWm5RdFlYVjBhR1Z1ZEdsallYUnZjakJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkt3TkYyWTN0cGo1d2d5MGRDT2hhTWVEaWRmK2ozb08KUEpJYmZSTlBjMTNFRElQQnF0ZHc1dUw0cU84MnhPNFBGVzZPb0JjcU91Lzk4U1ZaRUtURmd3MmdBREFLQmdncQpoa2pPUFFRREFnTkhBREJFQWlCM09KSHlRNCtWdW8raDBzY1VSS2l5aktVMnlkc0ZLQjA1RzNNVEx5aWQvZ0lnCk9PNTB0SzdjczhROG9XOTh1ZUl3SFNuN2ROSjRoMjEydnFpRjNJM0F5aWM9Ci0tLS0tRU5EIENFUlRJRklDQVRFIFJFUVVFU1QtLS0tLQo=
  signerName: kubernetes.io/kube-apiserver-client
  uid: 34d056c1-e292-4011-a05e-8b59d6abc4e9
  usages:
  - digital signature
  - key encipherment
  - client auth
  username: system:serviceaccount:openshift-authentication-operator:authentication-operator
status:
  certificate: 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
  conditions:
  - lastTransitionTime: "2026-03-13T01:12:30Z"
    lastUpdateTime: "2026-03-13T01:12:30Z"
    message: Auto-approved CSR "system:openshift:openshift-authenticator-vqkm7"
    reason: AutoApproved
    status: "True"
    type: Approved