--- apiVersion: v1 items: - apiVersion: v1 data: .dockercfg: MiBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/internal-registry-auth-token.service-account: machine-approver-sa creationTimestamp: "2026-03-07T21:15:34Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: f:.dockercfg: {} f:metadata: f:annotations: f:openshift.io/internal-registry-auth-token.service-account: {} f:ownerReferences: k:{"uid":"1405ba63-afaf-45ed-9811-e0ef8fcdb701"}: {} f:type: {} manager: openshift.io/image-registry-pull-secrets_service-account-controller operation: Apply time: "2026-03-07T21:15:34Z" name: machine-approver-sa-dockercfg-fswfb namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: ServiceAccount name: machine-approver-sa uid: 1405ba63-afaf-45ed-9811-e0ef8fcdb701 resourceVersion: "8663" uid: d5e8c009-989a-459d-a620-a571b1dabfaf type: kubernetes.io/dockercfg - apiVersion: v1 data: tls.crt: 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 tls.key: MTY3NSBieXRlcyBsb25n kind: Secret metadata: annotations: openshift.io/description: 'Secret contains a pair signed serving certificate/key that is generated by Service CA operator for service/machine-approver with hostname machine-approver.openshift-cluster-machine-approver.svc and is annotated to the service with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name: machine-approver-tls''. The certificate is valid for 2 years.' openshift.io/owning-component: service-ca service.alpha.openshift.io/expiry: "2028-03-06T21:16:50Z" service.alpha.openshift.io/originating-service-name: machine-approver service.alpha.openshift.io/originating-service-uid: 89854897-d9ac-452d-be49-265e956a1108 service.beta.openshift.io/expiry: "2028-03-06T21:16:50Z" creationTimestamp: "2026-03-07T21:16:50Z" managedFields: - apiVersion: v1 fieldsType: FieldsV1 fieldsV1: f:data: .: {} f:tls.crt: {} f:tls.key: {} f:metadata: f:annotations: .: {} f:openshift.io/description: {} f:openshift.io/owning-component: {} f:service.alpha.openshift.io/expiry: {} f:service.alpha.openshift.io/originating-service-name: {} f:service.alpha.openshift.io/originating-service-uid: {} f:service.beta.openshift.io/expiry: {} f:ownerReferences: .: {} k:{"uid":"89854897-d9ac-452d-be49-265e956a1108"}: {} f:type: {} manager: service-ca-operator operation: Update time: "2026-03-07T21:16:50Z" name: machine-approver-tls namespace: openshift-cluster-machine-approver ownerReferences: - apiVersion: v1 kind: Service name: machine-approver uid: 89854897-d9ac-452d-be49-265e956a1108 resourceVersion: "9139" uid: 479847fa-7f57-467b-b047-1e528f77510e type: kubernetes.io/tls kind: SecretList metadata: resourceVersion: "44552"