--- apiVersion: v1 items: - apiVersion: v1 data: tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURTRENDQWpDZ0F3SUJBZ0lJQnU4eFdITzZFZmt3RFFZSktvWklodmNOQVFFTEJRQXdNREV1TUN3R0ExVUUKQXd3bGIzQmxibk5vYVdaMExXVjBZMlJmWlhSalpDMXphV2R1WlhKQU1UYzJNREUzT0RFM016QWVGdzB5TlRFdwpNVEV4TURJeU5USmFGdzB5T0RFd01UQXhNREl5TlROYU1FQXhLREFTQmdOVkJBb1RDMlYwWTJRdFkyeHBaVzUwCk1CSUdBMVVFQ2hNTGMzbHpkR1Z0T21WMFkyUXhGREFTQmdOVkJBTVRDMlYwWTJRdFkyeHBaVzUwTUlJQklqQU4KQmdrcWhraUc5dzBCQVFFRkFBT0NBUThBTUlJQkNnS0NBUUVBOW8rT3czckU3ZHJnU1ZManF1N3djWDc5cm1NZQpOSm1HT2V5R1h6UFo3TFlEa1VwWUxVU3JoVXU4N01HQ1NHYVZSM2ZmYVdyZlIyaTNJWk9DR1VCK25HV3o0Y3hpCjJTa3FJalc4eGhDWlp6ajVRK3oydmtmV0tBWjIwbmRjL2FRTnI5Q1Ztcm9KeERaYlhaMExmV3d5aithaytQeTQKSnJIZHBhWWoxeVFjdUxVZFp2bmNtNkJXTURaRTJwUU1XclhrMFdBYnNCb2h4SlJGcm0xVzdXeEJZajMrMFpFZApvTW42T3pLTmFYTERoUWNwUjJtVXJYVTJ1ckdQZlg2aUNYK1IwV2R6M0hqV3NET1c3VndGMStEUzQ5eGFmNnpkCktmcHR0UndOdWUyZWoyN0ZkYVd3cDREWDNFaXI5OXovbDY0T21tZ3pIRmVKemUzazFEeUozVGVaRXdJREFRQUIKbzFZd1ZEQU9CZ05WSFE4QkFmOEVCQU1DQmFBd0V3WURWUjBsQkF3d0NnWUlLd1lCQlFVSEF3SXdEQVlEVlIwVApBUUgvQkFJd0FEQWZCZ05WSFNNRUdEQVdnQlFNTWFqVHlXc0c4L3NDeDlqMDZQYTJPY0RSUlRBTkJna3Foa2lHCjl3MEJBUXNGQUFPQ0FRRUFTZ3pvRUxoLzFNU3NzN01hVjNVZmNISDhLU3JXNndEd3NEdXJsRXJuSXEvUmJrblEKZTFIbXNELzArTXFJMHltd0ttMk5Id2tFb1JqTWpGbHYyamRjV0NMM2l2WjZSYlFBR2RCZXVMSWVtT1pqQUJFdwpjZ3UrZnRlaDRJazFVRmU0aDNNcDlRMmg1NXBIRmVEVWp1NmsyRU42a1JiTWhhM0dzYzRWaEZUVzFsRS9YbEJYCjhIMzlVU1BVTnd5WUkxMEVmQVYzanJlcjJ4eCswSkFPTDFZUmJVZlIydEZOMWVoaHdkU0RZbFA3bzFYeHNUYnAKT1hpNmtOS2JMTEk2dWNGeG0rN3QzZWMrNWkrYjJPMzlldERmVzdiNzdFMUdOaXJMWnQxMEw2ejM2cFYxdlliUwpST0UzL1ZJaUZETk1QWkJPN3VUYXZlYWpWZ241eXBlWHp6eWIzQT09Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K tls.key: MTY3NSBieXRlcyBsb25n kind: Secret metadata: annotations: auth.openshift.io/certificate-issuer: openshift-etcd_etcd-signer@1760178173 auth.openshift.io/certificate-not-after: "2028-10-10T10:22:53Z" auth.openshift.io/certificate-not-before: "2025-10-11T10:22:52Z" openshift.io/description: Client certificate for apiserver, cluster-etcd-operator and etcdctl to reach etcd. Generated by cluster-etcd-operator for etcd. This certificate is valid for 1095 days and starts refreshing after 803 days. openshift.io/owning-component: etcd creationTimestamp: "2025-10-11T10:28:33Z" labels: auth.openshift.io/managed-certificate-type: target managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:auth.openshift.io/certificate-issuer: {} f:auth.openshift.io/certificate-not-after: {} f:auth.openshift.io/certificate-not-before: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:labels: .: {} f:auth.openshift.io/managed-certificate-type: {} f:type: {} manager: authentication-operator operation: Update time: "2025-10-11T10:28:33Z" name: etcd-client namespace: openshift-oauth-apiserver resourceVersion: "6330" uid: d5b2ed89-56c1-416a-bc9f-46a39aa9e4a7 type: kubernetes.io/tls - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: oauth-apiserver-sa creationTimestamp: "2025-10-11T10:35:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"2ec4f6bd-db71-405f-b022-669246588a91"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2025-10-11T10:35:48Z" name: oauth-apiserver-sa-dockercfg-zlnjr namespace: openshift-oauth-apiserver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: oauth-apiserver-sa uid: 2ec4f6bd-db71-405f-b022-669246588a91 resourceVersion: "14762" uid: 62117c72-d732-4809-9fe3-16924fccaa57 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MjI3IGJ5dGVzIGxvbmc= kind: Secret metadata: annotations: openshift.io/owning-component: apiserver-auth creationTimestamp: "2025-10-11T10:28:28Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/owning-component: {} f:type: {} manager: authentication-operator operation: Update time: "2025-10-11T10:28:28Z" name: openshift-authenticator-certs namespace: openshift-oauth-apiserver resourceVersion: "5683" uid: d6ea7297-5078-4c86-89f9-34e31069d8f9 type: Opaque - apiVersion: v1 data: tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUQ4ekNDQXR1Z0F3SUJBZ0lJWnR2OU8rSTZvcEl3RFFZSktvWklodmNOQVFFTEJRQXdOakUwTURJR0ExVUUKQXd3cmIzQmxibk5vYVdaMExYTmxjblpwWTJVdGMyVnlkbWx1WnkxemFXZHVaWEpBTVRjMk1ERTNPRFE1T1RBZQpGdzB5TlRFd01URXhNREk0TkRSYUZ3MHlOekV3TVRFeE1ESTRORFZhTUN3eEtqQW9CZ05WQkFNVElXRndhUzV2CmNHVnVjMmhwWm5RdGIyRjFkR2d0WVhCcGMyVnlkbVZ5TG5OMll6Q0NBU0l3RFFZSktvWklodmNOQVFFQkJRQUQKZ2dFUEFEQ0NBUW9DZ2dFQkFNRVNEM3NpNHVXZXE3YmlsTTRYdE9EeEM4VDNKMzJFQldYZVIzT2prQU9la05kWgoxZFZPY01pNjc4dFF2ZmZiejBCR0hMQzFxRlo5R1RJZjdIajlWTUdWanBSMWpRS2VnUkhMNGlYWWFNM1FTWGsxCmMvN3d5RWtpcFpndkZOeUFpSmVWYXN1ellCYzI2ejFTeGhlMitqOGtWU3Z5M0h5bUx0ZTNUQjUxVGtneC9ocDMKajB2b2NiRytHK0RpcjFYdGc4UDRUM0pDSm92K0VKMkluNzFCMThYeWd5Z0F1QmQ4RmlabWJObUhtN1lBVkk3TwozT0dEN0hKdUEyMFNIYytqNXZUalg1Wkk4V1dpMndxOXhWRDVxMjhpRHFzRkRlOW1FNGlkbGdqaThMcDNJUkNQCkozZUNGMXZBdHlGd2dmU0F1ODl1ZE9nZ0VDaE1iYzcyeXY2cFNqMENBd0VBQWFPQ0FRMHdnZ0VKTUE0R0ExVWQKRHdFQi93UUVBd0lGb0RBVEJnTlZIU1VFRERBS0JnZ3JCZ0VGQlFjREFUQU1CZ05WSFJNQkFmOEVBakFBTUIwRwpBMVVkRGdRV0JCVDhDQkhYZ1dmcGdxVVpIRk9CSkx5a0tPME43akFmQmdOVkhTTUVHREFXZ0JRblV5ZG5iNElGClBRYjZmN2gwNGVWb092L0RiekJkQmdOVkhSRUVWakJVZ2lGaGNHa3ViM0JsYm5Ob2FXWjBMVzloZFhSb0xXRncKYVhObGNuWmxjaTV6ZG1PQ0wyRndhUzV2Y0dWdWMyaHBablF0YjJGMWRHZ3RZWEJwYzJWeWRtVnlMbk4yWXk1agpiSFZ6ZEdWeUxteHZZMkZzTURVR0N5c0dBUVFCa2dnUlpBSUJCQ1lUSkROaE5qQmpZVGsxTFdFNVptVXROREUzCllTMDROemN6TFdVMk1XSTFNR1ZqWkRBMU9UQU5CZ2txaGtpRzl3MEJBUXNGQUFPQ0FRRUFWcThjOUZVSmxwcUYKNlNPNXJHUUFvdGg4M0J2Y3Y3WkxhcVVpdFVuTjI3dnA4MUVjYTJHS092VkR0cnJwNkxYeFRmaEZXNmk2NllsUgpZenlvR3Bhck1aNi81dGQ2T05tVUdBR2pOL0hGWXFyWU1vakZkTmIzVThrQnZEL1lSZ09qd2pkSW8vSEtsWkJwCjBZOGhRTlZORU93MklJMkd6c3NrdkpYcU0zaURCUnloZWE5dTIrK2ZML1dKQjZzdlIvSVJjeGYzVFZPU3ovK3EKN1RNM3NWazAxWXp4aElTTkdsZnE5emtRc3NTbThkVm03UkV0cWdKck9xQjMyRnYxejJkYkpNQWxYUmlKMVZqegp2VkpSemROakVTaGZvOFNMb1dRN0UvR1JZeHUzbXVSWHEwNUptb1NlVGpwSUsycjdYVjNZeno0em9kZUtraCtyCjVqWlZVaDdZOEE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCi0tLS0tQkVHSU4gQ0VSVElGSUNBVEUtLS0tLQpNSUlEVVRDQ0FqbWdBd0lCQWdJSUxpOTlERmo2OHhjd0RRWUpLb1pJaHZjTkFRRUxCUUF3TmpFME1ESUdBMVVFCkF3d3JiM0JsYm5Ob2FXWjBMWE5sY25acFkyVXRjMlZ5ZG1sdVp5MXphV2R1WlhKQU1UYzJNREUzT0RRNU9UQWUKRncweU5URXdNVEV4TURJNE1UaGFGdzB5TnpFeU1UQXhNREk0TVRsYU1EWXhOREF5QmdOVkJBTU1LMjl3Wlc1egphR2xtZEMxelpYSjJhV05sTFhObGNuWnBibWN0YzJsbmJtVnlRREUzTmpBeE56ZzBPVGt3Z2dFaU1BMEdDU3FHClNJYjNEUUVCQVFVQUE0SUJEd0F3Z2dFS0FvSUJBUUROMkYvTnJ0WWhlRFA1MmRpcmI2NFVuYVR3WVp5dDA5THgKZk5rNENCL0RnUFJLSUtsWEkrWW0vbFhRZlk0dzFhZjRuQ01HNUY3djlpSDBHMHQrYlRsczZ6VndNUGZPZ2diWQpGWlF2TGszei9EVVpnWURCTnBJN2pwWGtTM3pDRlh5R3RnRWROdks2Ky9SNVhmU0hyZ3QwenFEcWhRb3pTSEN0CmZ4NFp4bk5GcDJzNUM4TmlRUWgvWDNrOHh4dTRQNm8rZ2lJaWhOTXNZQUtSWm5aakJveGRucit2eFVHTEN6SUIKVnp1VE5rSTlHdFZYaHBlTkk1bTF0SnAxbTBDQ0VtekJFZmxFeEtrMllvWUlLamhjMDY3RW9jVWhTbHh6WWVrNwp3WXlEUVRmVHlCSWxTMG1SQjBNOTBuaWt6ek9uY0ZtNDNwT2I4MWszRk91WndqcUNJTWFGQWdNQkFBR2pZekJoCk1BNEdBMVVkRHdFQi93UUVBd0lDcERBUEJnTlZIUk1CQWY4RUJUQURBUUgvTUIwR0ExVWREZ1FXQkJRblV5ZG4KYjRJRlBRYjZmN2gwNGVWb092L0RiekFmQmdOVkhTTUVHREFXZ0JRblV5ZG5iNElGUFFiNmY3aDA0ZVZvT3YvRApiekFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBcEQzRjV4YnNPMkpuQUpHZjgvOUV0eWovYjh2UStteTB0OFcwCitHYko3YjV6VmNWT3BFY0NTaFJZSzR1U2oycDhvQmZCNkdwUmFrWWdSTFR4U0ZvTjU3NDJtZHdBcHUwV1VpU2wKSXQ3UVJ5dGxrODZKa3hSZGFZOTl2YmhrN1NzUlpBNUhWd3lnOUxGZ2lUL2hJenhhc1hVeDV5MFdTVVYxVCszSwpFV0MrbW9zeUVFQXR2Z25JckVNclJYR3pxQ3o2dGkxTWNUSE9aY0UrcDQ5cjI4MVg1c3drZ09wbm5OdGpaMTNVCjJhakxrc044cVlrV0swRWhyNHhPVmFnT1pONktNVkpOZytacUcweDYxQnRtTjVGeHJ0bTkxckdxWXVCWGVOMkUKVENmMWowcGRSOHhIb0ZTVFFQMmp2bFo0bGR4QnpUOTJTaVhHTzJLUFB6UUJoUkpqRkE9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== tls.key: MTY3NSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/api with hostname api.openshift-oauth-apiserver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: serving-cert''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2027-10-11T10:28:45Z" service.alpha.openshift.io/originating-service-name: api service.alpha.openshift.io/originating-service-uid: 3a60ca95-a9fe-417a-8773-e61b50ecd059 service.beta.openshift.io/expiry: "2027-10-11T10:28:45Z" creationTimestamp: "2025-10-11T10:28:46Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"3a60ca95-a9fe-417a-8773-e61b50ecd059"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2025-10-11T10:28:46Z" name: serving-cert namespace: openshift-oauth-apiserver ownerReferences: - apiVersion: v1 kind: Service name: api uid: 3a60ca95-a9fe-417a-8773-e61b50ecd059 resourceVersion: "7127" uid: 8693420b-a385-484e-9215-7cd8aa8e4604 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "64295"