--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-12T12:22:22Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"7142e51b-9af8-46e7-87df-8a34ed8029b1"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-12T12:22:22Z" name: machine-approver-sa-dockercfg-pmfnh namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: 7142e51b-9af8-46e7-87df-8a34ed8029b1 resourceVersion: "7983" uid: 33844a8f-99eb-46b3-82a1-db233cdff131 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUV3VENDQTZtZ0F3SUJBZ0lJTno1NEFFNitnMFl3RFFZSktvWklodmNOQVFFTEJRQXdOakUwTURJR0ExVUUKQXd3cmIzQmxibk5vYVdaMExYTmxjblpwWTJVdGMyVnlkbWx1WnkxemFXZHVaWEpBTVRjM016TXhPREE1TnpBZQpGdzB5TmpBek1USXhNakl6TkRWYUZ3MHlPREF6TVRFeE1qSXpORFphTUVReFFqQkFCZ05WQkFNTU9Tb3ViV0ZqCmFHbHVaUzFoY0hCeWIzWmxjaTV2Y0dWdWMyaHBablF0WTJ4MWMzUmxjaTF0WVdOb2FXNWxMV0Z3Y0hKdmRtVnkKTG5OMll6Q0NBU0l3RFFZSktvWklodmNOQVFFQkJRQURnZ0VQQURDQ0FRb0NnZ0VCQUo2bW1yTEtsNERvczJ2awp2V0EwNkQ4SHZYd0s0cjFGa3RwU3JxQmRxYit2dEJDV1hVRFZYdGRteFZnYmk1dkhRa1VqVXU4RUJjQ3I2QVZrCllpazhzV054enROVW0yaGxlU2VNQnFoeUNLamROUU9aNEo3VVkzOUdJVWdBYmppRkxCQzRPYUJGTE9zaFZ3ai8KTjJ4MmQyVkxPUWJhSVBDTHFRQ2FkcVlHWTRPdUhtanRrV2VxTHV5RU5NU2srZWIySWpDVlJOUGNZRUVreWY2WgpYblp3ZTBFYUpCdzY0MU45RHdKNmJ6bUxEWnVYbWwxeEljdEd0RFI5Z1drMkhBOG1PRC9TaCtpb2lVMlhQdGcrClZjZHpYM2pBbkJUdHRCNVZBN1dJWk9NMmZmZFlLMXdUKzhsMm1scUlhazh4L2dkR2ZkRkNSak9VT2tSd1NUMloKODkwZHdPRUNBd0VBQWFPQ0FjTXdnZ0cvTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdncgpCZ0VGQlFjREFUQU1CZ05WSFJNQkFmOEVBakFBTUIwR0ExVWREZ1FXQkJRNmJTVGZuRi9XN3JaY09lbWlUQ2ZVClFuMGl6akFmQmdOVkhTTUVHREFXZ0JUK3JMWlVhQUJBWm5ZVmtnNkVVZ0xNY0taYkF6Q0NBUkVHQTFVZEVRU0MKQVFnd2dnRUVnamtxTG0xaFkyaHBibVV0WVhCd2NtOTJaWEl1YjNCbGJuTm9hV1owTFdOc2RYTjBaWEl0YldGagphR2x1WlMxaGNIQnliM1psY2k1emRtT0NSeW91YldGamFHbHVaUzFoY0hCeWIzWmxjaTV2Y0dWdWMyaHBablF0ClkyeDFjM1JsY2kxdFlXTm9hVzVsTFdGd2NISnZkbVZ5TG5OMll5NWpiSFZ6ZEdWeUxteHZZMkZzZ2pkdFlXTm8KYVc1bExXRndjSEp2ZG1WeUxtOXdaVzV6YUdsbWRDMWpiSFZ6ZEdWeUxXMWhZMmhwYm1VdFlYQndjbTkyWlhJdQpjM1pqZ2tWdFlXTm9hVzVsTFdGd2NISnZkbVZ5TG05d1pXNXphR2xtZEMxamJIVnpkR1Z5TFcxaFkyaHBibVV0CllYQndjbTkyWlhJdWMzWmpMbU5zZFhOMFpYSXViRzlqWVd3d05RWUxLd1lCQkFHU0NCRmtBZ0VFSmhNa1lUQmkKTWpJeU1qY3RNakZtTnkwME9EWTNMV0UwWkdVdFpESXlOV1JsTldNellqZGhNQTBHQ1NxR1NJYjNEUUVCQ3dVQQpBNElCQVFBbWRrdjZLeG5JcWl1dElYU1lvM3ZrTDBxVnE0SWVvS1JVNHA5dTJ0U2pHVWlkWlhWN3IySm9yY21mCjloTVVSNDd5L0xmTEhFSXJ3bEphZ3d5aThmYU5UejdvY05CQkxTTisrOTRMRlhzTWtxaUs0aGtWMUFNb2RvR1oKeUFkdkNSUDk0alZtdGg1YzVIOWNFRzRmQmZXM05abzhFU3lhMmlNL3Y0aXZUTWZwVTFpSDN1L3BLQ2hrd0VZTwpNRHIzRWRkZG5tVFN2TC9vQk5Edm9zT3Q0Y29Sdk9jWDVPSGdOU3Q0WFh6UjJsZ2RNcEljRjMvd2k0R3ZLV2ZTCnNLbFdSUzVzYVdSYnZaa1VveDl5b3pxVEdDakpMQkNoTlNnUWU4b3dQZU9ybk1VSUkxdW5ObDNrakhqVFBzSWYKemdGRkhHTkdIK2lTMmR0MUhTclkwYmV2RGtPNAotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCi0tLS0tQkVHSU4gQ0VSVElGSUNBVEUtLS0tLQpNSUlEVVRDQ0FqbWdBd0lCQWdJSVNGL0crd0JyLzNBd0RRWUpLb1pJaHZjTkFRRUxCUUF3TmpFME1ESUdBMVVFCkF3d3JiM0JsYm5Ob2FXWjBMWE5sY25acFkyVXRjMlZ5ZG1sdVp5MXphV2R1WlhKQU1UYzNNek14T0RBNU56QWUKRncweU5qQXpNVEl4TWpJeE16WmFGdzB5T0RBMU1UQXhNakl4TXpkYU1EWXhOREF5QmdOVkJBTU1LMjl3Wlc1egphR2xtZEMxelpYSjJhV05sTFhObGNuWnBibWN0YzJsbmJtVnlRREUzTnpNek1UZ3dPVGN3Z2dFaU1BMEdDU3FHClNJYjNEUUVCQVFVQUE0SUJEd0F3Z2dFS0FvSUJBUUNVT2tYa0h4bVg3VGMrc1VGRVZtQlY1VlBQZ29yNFpHN24KL2tBbFhuMzlTWHc0V2JrcW5tZC94VHprVFlvSXlMMnprd0xiS2RaZERVYkZ3Y0p1Mkp0d21tN1hQdVlDU3V1dwo0TU1jUEY0N3BiTnhabVBCT3I3b21UU2RGcWw4TzNhL0FSVFJ2eEgzSEMrQzVPYUZxQjE0ZkNBakpSVHEzMXRXCk1TeHpTb2RCcUFRcFE2NG1NUWVDVDRodktHNVRRWUhBWUI3TFFOK1R4RlNwUmxheHRiLzJNVmViR0hwVi9lYU8Kb2pySkJoVEZEVHhzTmk5QktlbWpFT2YzT3MzSG8vNmorVXBLUjZaZ295RzlrM1EyeG5FNDJtTFlhZTA2U2pHNApQTUs1RzVlK1J4NUU3NG1hcW5ML3VRUVJuRlkvcVdJRDRxajc1WGlBQUxqTXpSS1NBZWgvQWdNQkFBR2pZekJoCk1BNEdBMVVkRHdFQi93UUVBd0lDcERBUEJnTlZIUk1CQWY4RUJUQURBUUgvTUIwR0ExVWREZ1FXQkJUK3JMWlUKYUFCQVpuWVZrZzZFVWdMTWNLWmJBekFmQmdOVkhTTUVHREFXZ0JUK3JMWlVhQUJBWm5ZVmtnNkVVZ0xNY0taYgpBekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBV0lrYUxiNVJSckt3NDJmc3B6a2ZTZ09sWXVxSGozZDVvLzdrCm1IL1dUOXAxWlpOdlN1VlRSM0ZrOWdHaXl5MUx5aldZTnhlTEtsRm9lbERYTEVOWjZNYlprNUJJd3BhVXF1c3cKU1k3YWZGL2Y4TlpuaDFjMExJQW5BMmZxU0RHM0laTHZoZkEva1FueGxJSFlvMVVTSU9PRXAvUDJhMzAxYS8wawo4K0JibGFmd0U1VldXaHVScHhOb0pJbWNYbkgvcERHajBEc2lMc2xVS2pMcEptbEwvNUJOS0ZveEZqTk9pMWtnCkJ6OG1LVzdKY2RqT2NWWW4vVzJjMTk0WVNrNEV2eEdVZjRIcXlTSUNVM0VDdEdkdDhnL3ZGWmM1SE54YlpoOG4KcElTYkRGcTFiVitjRGc3M3QzQkdlUXk0VVl3S0N5VFFTYXRhVDh5ejlvUURKVFhGWVE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== tls.key: MTY3NSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-11T12:23:46Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: a0b22227-21f7-4867-a4de-d225de5c3b7a service.beta.openshift.io/expiry: "2028-03-11T12:23:46Z" creationTimestamp: "2026-03-12T12:23:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"a0b22227-21f7-4867-a4de-d225de5c3b7a"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-12T12:23:46Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: a0b22227-21f7-4867-a4de-d225de5c3b7a resourceVersion: "9228" uid: 7f04248c-764c-4c14-b536-673629cf6677 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "37202"