--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-19T11:54:04Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"fd27dbbe-68f9-4134-9295-ef96f5ab82b3"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-19T11:54:04Z" name: machine-approver-sa-dockercfg-2l456 namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: fd27dbbe-68f9-4134-9295-ef96f5ab82b3 resourceVersion: "8421" uid: 9cb2528e-6a89-4256-b937-77fff23fd336 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3OSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-18T11:57:16Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: 3f91597a-5e38-491d-b5b4-6cfada43a9e0 service.beta.openshift.io/expiry: "2028-03-18T11:57:16Z" creationTimestamp: "2026-03-19T11:57:16Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"3f91597a-5e38-491d-b5b4-6cfada43a9e0"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-19T11:57:16Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: 3f91597a-5e38-491d-b5b4-6cfada43a9e0 resourceVersion: "9254" uid: e7c3c83b-5756-4264-b940-02068908ebc6 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "22967"