Status: IN
Of the three well-known Kubernetes CSR signers, only `kubernetes.io/kube-apiserver-client-kubelet` can be auto-approved by the `csrapproving` controller.
Source: entries/2026/03/05/en-documentation-openshift_container_platform-417-html-security_apis-certificate.md
JSON