--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-09T16:26:27Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"5f305cef-c7ba-4709-aca0-38d56539b629"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-09T16:26:27Z" name: machine-approver-sa-dockercfg-kz284 namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: 5f305cef-c7ba-4709-aca0-38d56539b629 resourceVersion: "6953" uid: 1c6235c7-5bdf-4a8f-99a1-bed84f9ff6fa type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3NSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-08T16:28:22Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: cc8de233-8a31-4f3f-8cb1-b91452a77e6e service.beta.openshift.io/expiry: "2028-03-08T16:28:22Z" creationTimestamp: "2026-03-09T16:28:22Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"cc8de233-8a31-4f3f-8cb1-b91452a77e6e"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-09T16:28:22Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: cc8de233-8a31-4f3f-8cb1-b91452a77e6e resourceVersion: "8530" uid: fd8321af-e15d-4edb-94c6-31e2bb2398b7 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "26384"