--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-13T01:16:48Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"63c21da7-d465-442f-a574-b3a282fbe69c"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-13T01:16:48Z" name: machine-approver-sa-dockercfg-5vwqr namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: 63c21da7-d465-442f-a574-b3a282fbe69c resourceVersion: "8719" uid: c6ed62a9-d70c-4da5-bf89-ef93e26d1484 type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3NSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-12T01:13:17Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: a3d3a551-59f7-42b9-913b-f8cd33f757ac service.beta.openshift.io/expiry: "2028-03-12T01:13:17Z" creationTimestamp: "2026-03-13T01:13:17Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"a3d3a551-59f7-42b9-913b-f8cd33f757ac"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-13T01:13:17Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: a3d3a551-59f7-42b9-913b-f8cd33f757ac resourceVersion: "7695" uid: 5517c980-6769-443e-bf30-14f0a1b3b318 type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "21752"