approve_csr.sh

#!/bin/bash

for i in $(oc --kubeconfig /root/deployment/auth/kubeconfig get csr | grep -i pending | awk '{ print $1 }'); do
	echo "Approving CSR $i"
	oc --kubeconfig /root/deployment/auth/kubeconfig adm certificate approve $i
done

ocp-csr-approver.service

[Unit]
Description=OCP CSR Automatic Approval Service

[Service]
Type=oneshot
ExecStart=/usr/sbin/approve_csr.sh

[Install]
WantedBy=multi-user.target

ocp-csr-approver.timer

[Unit]
Description=OCP CSR Automatic Approval Timer

[Timer]
#check every 5 seconds for pending CSR and approve them
OnCalendar=*-*-* *:*:0/5

[Install]
WantedBy=timers.target