--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-13T10:37:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"afe59f24-74ed-4758-9e55-25270953f215"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-13T10:37:32Z" name: machine-approver-sa-dockercfg-ff7d6 namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: afe59f24-74ed-4758-9e55-25270953f215 resourceVersion: "9765" uid: 49c23fb5-3d13-4749-ad3d-3739bd1202a1 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3OSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-12T10:37:10Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: 82c8a86f-c70d-498b-a36a-5a8a206ad720 service.beta.openshift.io/expiry: "2028-03-12T10:37:10Z" creationTimestamp: "2026-03-13T10:37:10Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"82c8a86f-c70d-498b-a36a-5a8a206ad720"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-13T10:37:10Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: 82c8a86f-c70d-498b-a36a-5a8a206ad720 resourceVersion: "8097" uid: 41324c1d-ee3d-4732-b57d-30ee347f5b17 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "22501"