--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-20T08:39:08Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"91056cea-85e6-4ae8-95ec-8c766d5ceeca"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-20T08:39:08Z" name: machine-approver-sa-dockercfg-rfqnk namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: 91056cea-85e6-4ae8-95ec-8c766d5ceeca resourceVersion: "9531" uid: c062aa14-bad1-4776-b6bf-83bfaf5da0e0 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3OSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-19T08:37:21Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: a73cb6f3-9320-42e2-8c3d-51dcaf3e2c67 service.beta.openshift.io/expiry: "2028-03-19T08:37:21Z" creationTimestamp: "2026-03-20T08:37:21Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"a73cb6f3-9320-42e2-8c3d-51dcaf3e2c67"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-20T08:37:21Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: a73cb6f3-9320-42e2-8c3d-51dcaf3e2c67 resourceVersion: "8503" uid: c4b19a88-fa42-4aa6-b0d6-872fd7d5dc05 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "77215"