--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-08T21:58:23Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"d2ba1b9f-85aa-4f39-b3a2-4b7762aa4207"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-08T21:58:23Z" name: machine-approver-sa-dockercfg-cgg74 namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: d2ba1b9f-85aa-4f39-b3a2-4b7762aa4207 resourceVersion: "8485" uid: 0fc6ce31-d944-4ca2-9f0c-ed0e28edba37 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3OSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-07T21:58:20Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: c0f1a694-1d53-467f-a1b0-01c0a2ecac7a service.beta.openshift.io/expiry: "2028-03-07T21:58:20Z" creationTimestamp: "2026-03-08T21:58:20Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"c0f1a694-1d53-467f-a1b0-01c0a2ecac7a"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-08T21:58:20Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: c0f1a694-1d53-467f-a1b0-01c0a2ecac7a resourceVersion: "8139" uid: a8f6ce01-9989-4ad5-8603-9472218bb262 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "24121"