--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-19T11:57:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"93686e9b-f186-4efd-8711-c773382ca085"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-19T11:57:02Z" name: machine-approver-sa-dockercfg-mc2cj namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: 93686e9b-f186-4efd-8711-c773382ca085 resourceVersion: "9920" uid: 6ab4a53b-2b16-4e1d-a726-c2b87ce9e037 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3OSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-18T11:56:50Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: dcd55a91-e971-4da7-924f-5162560a1eee service.beta.openshift.io/expiry: "2028-03-18T11:56:50Z" creationTimestamp: "2026-03-19T11:56:50Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"dcd55a91-e971-4da7-924f-5162560a1eee"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-19T11:56:50Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: dcd55a91-e971-4da7-924f-5162560a1eee resourceVersion: "9793" uid: 404f16f6-32ea-461f-bb56-6ce5e95261eb type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "76984"