--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-19T09:21:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"c13ec323-7e8e-4109-a7a1-b0105d1051d3"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-19T09:21:21Z" name: machine-approver-sa-dockercfg-l9t78 namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: c13ec323-7e8e-4109-a7a1-b0105d1051d3 resourceVersion: "8348" uid: 630e9cca-a4e6-4a23-b277-d7a0749228da type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUV3VENDQTZtZ0F3SUJBZ0lJQ0FSSjdMaXpEanN3RFFZSktvWklodmNOQVFFTEJRQXdOakUwTURJR0ExVUUKQXd3cmIzQmxibk5vYVdaMExYTmxjblpwWTJVdGMyVnlkbWx1WnkxemFXZHVaWEpBTVRjM016a3hNakF6TlRBZQpGdzB5TmpBek1Ua3dPVEl4TXpGYUZ3MHlPREF6TVRnd09USXhNekphTUVReFFqQkFCZ05WQkFNTU9Tb3ViV0ZqCmFHbHVaUzFoY0hCeWIzWmxjaTV2Y0dWdWMyaHBablF0WTJ4MWMzUmxjaTF0WVdOb2FXNWxMV0Z3Y0hKdmRtVnkKTG5OMll6Q0NBU0l3RFFZSktvWklodmNOQVFFQkJRQURnZ0VQQURDQ0FRb0NnZ0VCQU9TT2lid1FKaTJoV2IzOQpzeCtqMVB1UENaRURJcU1jSXltTitNSm90RkVVZ1R0RldrVG9zOXJ1V21DeUVraEFNTVJoRGJrdVU0a0N6SjlQCjZBZXFhNGZIWExMVktFc0k0cGNVOG1TakttaU5VL2o1N1M1Rmg5alhObUZSOWxTdkpjK0RPekFiOFoxaDN3YUUKc0RjMHM3TnZHeHhuMXNWaTZRYUp2dFVOdUF6NzMwek50NG5keXFvZjR5WlFCeUJUTS9hL2FjYTdNUkRPMWdjaAp3b2xWOGRoendyN28zcmpCV1psOGhibFJCSEczVjFlMENUUkRveGFYcVFCdFlJNittdE45eDBRTFhMZ1NjWGtuClBXZU80U0xUYXFOLzcrZ0RqcXFrMkppR3MzRzFkamZtYVUrNTR4UjFZMnhjZkRHTzhhd1dSb2tMdkNUVnN1WWQKbDlYUnNLRUNBd0VBQWFPQ0FjTXdnZ0cvTUE0R0ExVWREd0VCL3dRRUF3SUZvREFUQmdOVkhTVUVEREFLQmdncgpCZ0VGQlFjREFUQU1CZ05WSFJNQkFmOEVBakFBTUIwR0ExVWREZ1FXQkJUbXcyZDJuUVRTMUF2aXNyaWQzc1FUCjgyc3J5REFmQmdOVkhTTUVHREFXZ0JRL1I4VGQ3aTFMTE95MlBlZTdyMjhINWNFbDRqQ0NBUkVHQTFVZEVRU0MKQVFnd2dnRUVnamtxTG0xaFkyaHBibVV0WVhCd2NtOTJaWEl1YjNCbGJuTm9hV1owTFdOc2RYTjBaWEl0YldGagphR2x1WlMxaGNIQnliM1psY2k1emRtT0NSeW91YldGamFHbHVaUzFoY0hCeWIzWmxjaTV2Y0dWdWMyaHBablF0ClkyeDFjM1JsY2kxdFlXTm9hVzVsTFdGd2NISnZkbVZ5TG5OMll5NWpiSFZ6ZEdWeUxteHZZMkZzZ2pkdFlXTm8KYVc1bExXRndjSEp2ZG1WeUxtOXdaVzV6YUdsbWRDMWpiSFZ6ZEdWeUxXMWhZMmhwYm1VdFlYQndjbTkyWlhJdQpjM1pqZ2tWdFlXTm9hVzVsTFdGd2NISnZkbVZ5TG05d1pXNXphR2xtZEMxamJIVnpkR1Z5TFcxaFkyaHBibVV0CllYQndjbTkyWlhJdWMzWmpMbU5zZFhOMFpYSXViRzlqWVd3d05RWUxLd1lCQkFHU0NCRmtBZ0VFSmhNa1lqVXoKTnpWalpXVXRZelJoWmkwME1HTXdMVGhpWkRRdFptVTFZemszTUdRNE5ETmxNQTBHQ1NxR1NJYjNEUUVCQ3dVQQpBNElCQVFBK0U1Z3FLTWJMTGR5SmxnT2pmN0ErSW56bjhoR3lVS1Z5OGJkakdMSk5mYWVWeDRLa1dmcWcxYVFjCnkvNzVBUVNqTjlWUWplaCtqTUxhTnhsdU1LYVVHa00wRW41YlN0Mko3eVg3S1lsRkx2aFVUOXYxd1Z2L05sS0kKOElQMTBpZFpyT3VNNlpIY2Vyalg0a3MwZlBKYXNscW5JOHo4dHdGR2ZkeG52ekJpOVB1d1Uvb1IxSFlvQUczeQp4eXhKaHBqdTl0Yy9NMDV2NFRPZmFqUkRPMjdHRWl2Z2hzVTdtOTBGNTVVWUhKRjRrdFNsV0crMEN4d2p6akM5CkU3b3Zrbm1hbVE1bVNqampBVzZ2Vjl2cXJxQ3dmdmRvdlI4V3NtL25ld3RSeTJ5WVZqY2l3WFRRbUpjY2Fzd3YKSXdHYi93M2toUmVzSmlSYVhzUW9tQjRjbDhuVwotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCi0tLS0tQkVHSU4gQ0VSVElGSUNBVEUtLS0tLQpNSUlEVVRDQ0FqbWdBd0lCQWdJSUlJalpLVk1jcWo0d0RRWUpLb1pJaHZjTkFRRUxCUUF3TmpFME1ESUdBMVVFCkF3d3JiM0JsYm5Ob2FXWjBMWE5sY25acFkyVXRjMlZ5ZG1sdVp5MXphV2R1WlhKQU1UYzNNemt4TWpBek5UQWUKRncweU5qQXpNVGt3T1RJd016UmFGdzB5T0RBMU1UY3dPVEl3TXpWYU1EWXhOREF5QmdOVkJBTU1LMjl3Wlc1egphR2xtZEMxelpYSjJhV05sTFhObGNuWnBibWN0YzJsbmJtVnlRREUzTnpNNU1USXdNelV3Z2dFaU1BMEdDU3FHClNJYjNEUUVCQVFVQUE0SUJEd0F3Z2dFS0FvSUJBUUMyRjh1Tys1UGxiSGk0TFJvaEVEWG9hamYvaGtMNW9ZbFYKdDFQd3dHaXF4YWlRc1psa1RNWHZya3kvVk5YVEU4YjdEcjFhSEZGbUc4VHpiSGx4NlJuQ2xveFJtYk8vMEQ2ZgpDeWplMkVZVklYM1FQMFFFeGRrdW9ROFJidzlRa3hpVWR6MjBBd2lJQWxkVTYreURCNnE2QnpoMm5zQkRKbWk5CnpnVXJubW10ZW10dG85ajQ4T1Z1UTdYVE1IOUR3T0ZwOVMxUWs4OG9KbFc0NjVCVStJcXNKNlo3RnRtbVVZYjMKOWpvbC9ON05kYlpUU3E5NDZtS2phZWlmV0lXM0t3RHdxOExaY2s3d1lYcWFCLzZiT1NzVFhjMnFMS0d1bEtWMgp6YmRtU3BKTFB5YkZ5YmE3NTkrd2FlSS9wZWEvOGFEanVhekhnSkVhcFJoK20raEEwbzhyQWdNQkFBR2pZekJoCk1BNEdBMVVkRHdFQi93UUVBd0lDcERBUEJnTlZIUk1CQWY4RUJUQURBUUgvTUIwR0ExVWREZ1FXQkJRL1I4VGQKN2kxTExPeTJQZWU3cjI4SDVjRWw0akFmQmdOVkhTTUVHREFXZ0JRL1I4VGQ3aTFMTE95MlBlZTdyMjhINWNFbAo0akFOQmdrcWhraUc5dzBCQVFzRkFBT0NBUUVBSktTTXBGWm0xNEdxdnpGcktlZGxVODFXRFdjSU01MjFOZHo0CnhiTUIzQmxNVnpRWnZ6K3dCdmJyNUN5VGpEOXBRYmZWNFhtOTh5dXdTNWxSWGt3N20yODhKTVZXancwVGtMQWQKY2hOSFlpMXVVdDUrUk9kcDUySkoxNmhSOUNQT0M5dHl6RW9Ua1V2aU50MlRPOWVSaHV0UHgrOGtDaXJER1hpZwpabWhTVTNsL0hWVmlTL0JLejJBek1nOHJDM0ZQZUhYdFZIdDI0dlppaE1yQ21YWTNSWnV6ZnVPK0NNVWdaM0JICjdKSnNIOTVLTkZVWWVsN1BqdkRLRyt6RUgzd1JSRHE1aWEvYnl6dUZEZk5La0ZvVDUvTGN5OUZIQkNENUwzTVIKajhZcDhQZkJSVDd2c0FWV3o0bzl3RUQ4c1IxOVZscmM4dHdwRGx6SDZJMmhRZHVJU2c9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== tls.key: MTY3OSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-18T09:21:32Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: b5375cee-c4af-40c0-8bd4-fe5c970d843e service.beta.openshift.io/expiry: "2028-03-18T09:21:32Z" creationTimestamp: "2026-03-19T09:21:32Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"b5375cee-c4af-40c0-8bd4-fe5c970d843e"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-19T09:21:32Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: b5375cee-c4af-40c0-8bd4-fe5c970d843e resourceVersion: "9384" uid: 955a35f9-15d8-4a24-946f-88e646b74e35 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "75894"