--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-18T13:07:55Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"45751ae9-71b7-41eb-a8d2-ca126c89638e"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-18T13:07:55Z" name: machine-approver-sa-dockercfg-qfz5b namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: 45751ae9-71b7-41eb-a8d2-ca126c89638e resourceVersion: "8209" uid: 1f5e2396-d505-49dc-a196-7875ba50aef9 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3OSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-17T13:11:33Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: 9268f67d-4661-4da3-af98-9dda4a56dbd5 service.beta.openshift.io/expiry: "2028-03-17T13:11:33Z" creationTimestamp: "2026-03-18T13:11:33Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"9268f67d-4661-4da3-af98-9dda4a56dbd5"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-18T13:11:33Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: 9268f67d-4661-4da3-af98-9dda4a56dbd5 resourceVersion: "9912" uid: e50f5cd7-80b5-4a4e-b4c2-ffcf9f167722 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "40768"