--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-18T17:42:43Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"9972dd99-e3a7-461f-87e3-a48f32a700c6"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-18T17:42:43Z" name: machine-approver-sa-dockercfg-gxxlp namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: 9972dd99-e3a7-461f-87e3-a48f32a700c6 resourceVersion: "8171" uid: 43500045-9eca-4370-b0f5-ac368fd08c6f type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3OSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-17T17:59:24Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: 487abb86-a9bc-449c-a317-c4518f274da4 service.beta.openshift.io/expiry: "2028-03-17T17:59:24Z" creationTimestamp: "2026-03-18T17:59:24Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"487abb86-a9bc-449c-a317-c4518f274da4"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-18T17:59:24Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: 487abb86-a9bc-449c-a317-c4518f274da4 resourceVersion: "12036" uid: ad1b41a3-4459-49fc-8126-c14b9c09fd11 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "40497"