--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-19T11:57:06Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"cea89309-ad85-4fc3-8cb5-7dabcc47dd98"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-19T11:57:06Z" name: machine-approver-sa-dockercfg-h5fcf namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: cea89309-ad85-4fc3-8cb5-7dabcc47dd98 resourceVersion: "10252" uid: ae101d3c-4a11-4c65-a6c7-82f76c1d435b type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3NSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-18T11:57:02Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: 2fa1b2b1-7c7b-4497-b0c2-0e3b3934cab5 service.beta.openshift.io/expiry: "2028-03-18T11:57:02Z" creationTimestamp: "2026-03-19T11:57:02Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"2fa1b2b1-7c7b-4497-b0c2-0e3b3934cab5"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-19T11:57:02Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: 2fa1b2b1-7c7b-4497-b0c2-0e3b3934cab5 resourceVersion: "10048" uid: a1d399ed-cef3-438f-a206-826465cb001c type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "51408"