csr-three-signer-names

Status: IN

CertificateSigningRequests have three signer names: `kubernetes.io/kube-apiserver-client-kubelet` (kubelet client certs), `kubernetes.io/kubelet-serving` (kubelet serving TLS certs), and `kubernetes.io/kube-apiserver-client` (generic API server client certs)

Source: entries/2026/03/05/en-documentation-openshift_container_platform-417-html-security_apis-security-ap.md

JSON