{"id":"csr-three-signer-names","text":"CertificateSigningRequests have three signer names: `kubernetes.io/kube-apiserver-client-kubelet` (kubelet client certs), `kubernetes.io/kubelet-serving` (kubelet serving TLS certs), and `kubernetes.io/kube-apiserver-client` (generic API server client certs)","truth_value":"IN","source":"entries/2026/03/05/en-documentation-openshift_container_platform-417-html-security_apis-security-ap.md","source_url":"","source_hash":"50074267475025da","justifications":[],"dependents":[],"metadata":{},"explanation":{"steps":[{"node":"csr-three-signer-names","truth_value":"IN","reason":"premise"}]}}