--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-12T20:50:35Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"8085d51c-984a-407f-ac0f-77d828701c34"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-12T20:50:35Z" name: machine-approver-sa-dockercfg-5j2qf namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: 8085d51c-984a-407f-ac0f-77d828701c34 resourceVersion: "8488" uid: b999c7f6-f620-42b9-8c62-8a904a6950a4 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3NSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-11T20:55:21Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: 2e2566b6-8254-48be-9faa-21be4ecd45ac service.beta.openshift.io/expiry: "2028-03-11T20:55:21Z" creationTimestamp: "2026-03-12T20:55:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"2e2566b6-8254-48be-9faa-21be4ecd45ac"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-12T20:55:21Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: 2e2566b6-8254-48be-9faa-21be4ecd45ac resourceVersion: "9174" uid: 5bb71a3a-8b5f-4ced-ba28-4a5257c6094b type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "41142"