---
apiVersion: v1
items:
- apiVersion: v1
  data:
    tls.crt: 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
    tls.key: MTY3OSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      auth.openshift.io/certificate-issuer: openshift-kube-apiserver-operator_aggregator-client-signer@1761632514
      auth.openshift.io/certificate-not-after: "2025-11-27T06:21:55Z"
      auth.openshift.io/certificate-not-before: "2025-10-28T06:21:54Z"
      certificates.openshift.io/auto-regenerate-after-offline-expiry: https://github.com/openshift/cluster-kube-apiserver-operator/pull/1631,'operator
        conditions openshift-apiserver'
      openshift.io/description: Signer for the kube-apiserver to create client certificates
        for aggregated apiservers to recognize as a front-proxy
      openshift.io/owning-component: kube-apiserver
    creationTimestamp: "2025-10-27T11:17:59Z"
    labels:
      auth.openshift.io/managed-certificate-type: signer
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data: {}
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/owning-component: {}
        f:type: {}
      manager: cluster-bootstrap
      operation: Update
      time: "2025-10-27T11:17:59Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            f:auth.openshift.io/certificate-issuer: {}
            f:auth.openshift.io/certificate-not-after: {}
            f:auth.openshift.io/certificate-not-before: {}
            f:certificates.openshift.io/auto-regenerate-after-offline-expiry: {}
            f:openshift.io/description: {}
          f:labels:
            .: {}
            f:auth.openshift.io/managed-certificate-type: {}
      manager: cluster-kube-apiserver-operator
      operation: Update
      time: "2025-10-28T06:21:55Z"
    name: aggregator-client-signer
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "779690"
    uid: 1bbd3ce1-516f-48b4-8e11-e4a2071fd6ca
  type: kubernetes.io/tls
- apiVersion: v1
  data:
    tls.crt: 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
    tls.key: MTY3NSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      openshift.io/description: 'Secret contains a pair signed serving certificate/key
        that is generated by Service CA operator for service/metrics with hostname
        metrics.openshift-kube-apiserver-operator.svc and is annotated to the service
        with annotating a service resource with ''service.beta.openshift.io/serving-cert-secret-name:
        kube-apiserver-operator-serving-cert''. The certificate is valid for 2 years.'
      openshift.io/owning-component: service-ca
      service.alpha.openshift.io/expiry: "2027-10-27T11:31:11Z"
      service.alpha.openshift.io/originating-service-name: metrics
      service.alpha.openshift.io/originating-service-uid: 329f4c15-e50a-4b51-ab4b-05762de9428a
      service.beta.openshift.io/expiry: "2027-10-27T11:31:11Z"
    creationTimestamp: "2025-10-27T11:31:12Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            .: {}
            f:openshift.io/description: {}
            f:openshift.io/owning-component: {}
            f:service.alpha.openshift.io/expiry: {}
            f:service.alpha.openshift.io/originating-service-name: {}
            f:service.alpha.openshift.io/originating-service-uid: {}
            f:service.beta.openshift.io/expiry: {}
          f:ownerReferences:
            .: {}
            k:{"uid":"329f4c15-e50a-4b51-ab4b-05762de9428a"}: {}
        f:type: {}
      manager: service-ca-operator
      operation: Update
      time: "2025-10-27T11:31:12Z"
    name: kube-apiserver-operator-serving-cert
    namespace: openshift-kube-apiserver-operator
    ownerReferences:
    - apiVersion: v1
      kind: Service
      name: metrics
      uid: 329f4c15-e50a-4b51-ab4b-05762de9428a
    resourceVersion: "7106"
    uid: ed3e11f4-d68e-4df4-8ac9-3ae8842ae423
  type: kubernetes.io/tls
- apiVersion: v1
  data:
    tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURRakNDQWlxZ0F3SUJBZ0lJQWpCNkZjTVNOUFV3RFFZSktvWklodmNOQVFFTEJRQXdQekVTTUJBR0ExVUUKQ3hNSmIzQmxibk5vYVdaME1Ta3dKd1lEVlFRREV5QnJkV0psTFdGd2FYTmxjblpsY2kxMGJ5MXJkV0psYkdWMApMWE5wWjI1bGNqQWVGdzB5TlRFd01qY3hNVEE1TlRCYUZ3MHlOakV3TWpjeE1UQTVOVEJhTUQ4eEVqQVFCZ05WCkJBc1RDVzl3Wlc1emFHbG1kREVwTUNjR0ExVUVBeE1nYTNWaVpTMWhjR2x6WlhKMlpYSXRkRzh0YTNWaVpXeGwKZEMxemFXZHVaWEl3Z2dFaU1BMEdDU3FHU0liM0RRRUJBUVVBQTRJQkR3QXdnZ0VLQW9JQkFRQ3FmelJXa2xESQpqdm42Z3J6V1ZXcnpKS2t0QWgvb0E1Mnh5MmoweUtQVEdWRGU0ekJVV0l4dWhnemkyaU41WnlIWjF1akdvWnZYCnZUbVB6NExsaDdwQ1BJcllnZS9zazlKVlB2MUNja05SakROOUVQb3haaXc0UHh0WTIxc3FsOXdHTld0MjFPazkKMllIOHlaMHJCdUd5czAwUjZ2VWdSdWFvaGJkeEgyS3R5ejdWT2NEQXRPdjlKeEVjN0l0MUxNWVFySVJJZ1UrQQpOQU9TbXE5cFNSVlF6bVpQYUhJM3M2WGQ1aXZGUW90ZnYyUmpsZjJ4NFFnSENhdERFcmk1Q1ZBNGF0S3V2MW1MCjI1RkJGTlYxNU9ibzhFb1dJL1c4RUQ3NEE3eUdZV3paYzY2clZUaERKSTg1bGNqd1R0TE5ES2ZneWY4djAxbGgKSVFDcGs2RUM4SU1uQWdNQkFBR2pRakJBTUE0R0ExVWREd0VCL3dRRUF3SUNwREFQQmdOVkhSTUJBZjhFQlRBRApBUUgvTUIwR0ExVWREZ1FXQkJSL0RvWXFPRVEveGdnbWlXVHpTcm1vajZwL3NUQU5CZ2txaGtpRzl3MEJBUXNGCkFBT0NBUUVBcFFlQ3dUYjlrcXdGT0hYU3pKM21XVm05dEFJOXoxVC9qa09yOW95Ni91eEFDVm9TMjFGMnZBODUKUnJLN3E0U3RsdnpSaDlUWlVVeEU4WXZHdUhHbnR1R05jb0Q1L090UTBrQ3JidW5aZEszOVJZNGplaVZaQU9XaApXODNuUXVaSDRMbWlGSUhwU0Z3VXJwblFiSlJ5TXRZTncvM1doRTV3L05iZ0RPTi9HZW8xZ0VpdzJXeHdSOGZPCkZXMmJsZm9XMForSGhFMHRPS3ZIbGlKakNsS1BZZURUQXRCY1hBbnA3ZnQwbHhidmJpWHRVSmFpMjE5SW0wRDgKbmxveGJKSkFoM2s4OStMY0lSWkFndHpsdE0xcjJMUUV5VkluNFp5bGhsY1BIb3FQSHZGbDZ6Y0tpdERhSkloTQpSMld2Q2ZvLzREeFA0cUFidUY5VUlFTHpYenRoTmc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
    tls.key: MTY3NSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      auth.openshift.io/certificate-issuer: kube-apiserver-to-kubelet-signer
      auth.openshift.io/certificate-not-after: "2026-10-27T11:09:50Z"
      auth.openshift.io/certificate-not-before: "2025-10-27T11:09:50Z"
      certificates.openshift.io/auto-regenerate-after-offline-expiry: https://github.com/openshift/cluster-kube-apiserver-operator/pull/1631,'[sig-cli]
        Kubectl logs logs should be able to retrieve and filter logs  [Conformance]
        [Suite:openshift/conformance/parallel/minimal] [Suite:k8s]'
      openshift.io/description: Signer for the kube-apiserver-to-kubelet-client so
        kubelets can recognize the kube-apiserver.
      openshift.io/owning-component: kube-apiserver
    creationTimestamp: "2025-10-27T11:18:01Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            .: {}
            f:auth.openshift.io/certificate-issuer: {}
            f:auth.openshift.io/certificate-not-after: {}
            f:auth.openshift.io/certificate-not-before: {}
            f:openshift.io/description: {}
            f:openshift.io/owning-component: {}
        f:type: {}
      manager: cluster-bootstrap
      operation: Update
      time: "2025-10-27T11:18:01Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:certificates.openshift.io/auto-regenerate-after-offline-expiry: {}
      manager: cluster-kube-apiserver-operator
      operation: Update
      time: "2025-10-27T11:31:02Z"
    name: kube-apiserver-to-kubelet-signer
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "6409"
    uid: 1e9cd262-595e-4bcf-809b-68c2861cef2c
  type: kubernetes.io/tls
- apiVersion: v1
  data:
    tls.crt: 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
    tls.key: MTY3OSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      auth.openshift.io/certificate-issuer: kube-control-plane-signer
      auth.openshift.io/certificate-not-after: "2026-10-27T11:09:50Z"
      auth.openshift.io/certificate-not-before: "2025-10-27T11:09:50Z"
      certificates.openshift.io/auto-regenerate-after-offline-expiry: https://github.com/openshift/cluster-kube-apiserver-operator/pull/1631,'operator
        conditions kube-apiserver'
      openshift.io/description: Signer for kube-controller-manager and kube-scheduler
        client certificates.
      openshift.io/owning-component: kube-apiserver
    creationTimestamp: "2025-10-27T11:18:00Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            .: {}
            f:auth.openshift.io/certificate-issuer: {}
            f:auth.openshift.io/certificate-not-after: {}
            f:auth.openshift.io/certificate-not-before: {}
            f:openshift.io/description: {}
            f:openshift.io/owning-component: {}
        f:type: {}
      manager: cluster-bootstrap
      operation: Update
      time: "2025-10-27T11:18:00Z"
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:metadata:
          f:annotations:
            f:certificates.openshift.io/auto-regenerate-after-offline-expiry: {}
      manager: cluster-kube-apiserver-operator
      operation: Update
      time: "2025-10-27T11:31:02Z"
    name: kube-control-plane-signer
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "6368"
    uid: 29c8b660-f44b-408c-a418-4328bbf8c73a
  type: kubernetes.io/tls
- apiVersion: v1
  data:
    tls.crt: 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
    tls.key: MTY3NSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      auth.openshift.io/certificate-issuer: kube-apiserver-lb-signer
      auth.openshift.io/certificate-not-after: "2035-10-25T10:58:57Z"
      auth.openshift.io/certificate-not-before: "2025-10-27T10:58:57Z"
      openshift.io/description: Signer used by the kube-apiserver operator to create
        serving certificates for the kube-apiserver via internal and external load
        balancers.
      openshift.io/owning-component: kube-apiserver
    creationTimestamp: "2025-10-27T11:18:01Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            .: {}
            f:auth.openshift.io/certificate-issuer: {}
            f:auth.openshift.io/certificate-not-after: {}
            f:auth.openshift.io/certificate-not-before: {}
            f:openshift.io/description: {}
            f:openshift.io/owning-component: {}
        f:type: {}
      manager: cluster-bootstrap
      operation: Update
      time: "2025-10-27T11:18:01Z"
    name: loadbalancer-serving-signer
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "622"
    uid: 9f0302a0-b61b-4afd-b0ae-289c5d2a5bc7
  type: kubernetes.io/tls
- apiVersion: v1
  data:
    tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURsekNDQW4rZ0F3SUJBZ0lJWmVIRm9KVUhrdFl3RFFZSktvWklodmNOQVFFTEJRQXdXVEZYTUZVR0ExVUUKQXd4T2IzQmxibk5vYVdaMExXdDFZbVV0WVhCcGMyVnlkbVZ5TFc5d1pYSmhkRzl5WDJ4dlkyRnNhRzl6ZEMxeQpaV052ZG1WeWVTMXpaWEoyYVc1bkxYTnBaMjVsY2tBeE56WXhOVFkwTmpVNU1CNFhEVEkxTVRBeU56RXhNekExCk9Gb1hEVE0xTVRBeU5URXhNekExT1Zvd1dURlhNRlVHQTFVRUF3eE9iM0JsYm5Ob2FXWjBMV3QxWW1VdFlYQnAKYzJWeWRtVnlMVzl3WlhKaGRHOXlYMnh2WTJGc2FHOXpkQzF5WldOdmRtVnllUzF6WlhKMmFXNW5MWE5wWjI1bApja0F4TnpZeE5UWTBOalU1TUlJQklqQU5CZ2txaGtpRzl3MEJBUUVGQUFPQ0FROEFNSUlCQ2dLQ0FRRUF6SXd5Ck1DcWd5bE8vc3Y1UFcyd0hnWE1hZFc3Wk9mbjBZNGdGQVBlVVVHYWhKRkxobDRSTC9Xc21nVGdPcE1kaUNPVk8KdDVnZmZ0UzVnUFBvcFZQNEllWFNTR2lldXlvZFpWSDNraG5JYmNPRFQwU29TS2tCTXB5RXIwazBwUDZ6a2VxRQpVRld3cXdkVllhOWs1R2Zqb0grZkMzWmQ5Z01DVmFlWHBlMXF4SDNLQVVNbzg3MjlIcGl4TlpHSXB3RnZLZ3JoCllBM3F0dW12TGpSZGVyMWtoekhTTHBaWGs1bHVqeEFFUUxFMjM5TGxValRsVzJzU3lNUTFJWGk4anVzQUJCMngKUHQwN3J2YXNoN0lzaFpwWlJ4RWN2RHRrMFB1WmxiUUcxNjh5TzV3Q1hFdStUMXJQWCtHSVlURmMzaFRWaVllRApIbG0xUXFLUWtPUVlZazBLUFFJREFRQUJvMk13WVRBT0JnTlZIUThCQWY4RUJBTUNBcVF3RHdZRFZSMFRBUUgvCkJBVXdBd0VCL3pBZEJnTlZIUTRFRmdRVXNyRVVnWHhTbElSOU9INlVSSlpWOGR1OVlub3dId1lEVlIwakJCZ3cKRm9BVXNyRVVnWHhTbElSOU9INlVSSlpWOGR1OVlub3dEUVlKS29aSWh2Y05BUUVMQlFBRGdnRUJBSURwVGpFaQpxcDJzc0pDQk9OeTV0Wk1yc3o1SmtLTGJuckF3MGpxemtsS2FUQzh2aW8xVTV6T0hJOG56blBGY2tSSEVpeEE3CnA3MGZYK2x0dnNYU3R3RVl3ODZFaWZRZERQaVo3dk50WVh0eXpHMEJacTdMZmVEM1RpS0RDUlZOUTJqTy9EUzAKMDIwbi9YZk9PL3Q3ZFlSWWpnWmdIRkVFRWhsb1pXSjBCTEk1SmFzZmlVYXVuOU1xa0RLLys3RkY5aTBmY0xZKwpjbnRBeDlibUwrMzN0QUM4UHJ5Q3F3ZWRnSVUyYWFjWUN0SnZ5dkxWbjg5UlE5bmVzK1I4OUtwNDV0elhQUk5nClZrUitXR2FYMm91RkYyaERiZXJ1MWZGeWtCNG91UmJTUDd2MW1UWmRTOUxxWlZBL2pjWS9KZTZDREVXcVppZGkKRWNTUlJEQzNRak1OOHVzPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
    tls.key: MTY3NSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      auth.openshift.io/certificate-issuer: openshift-kube-apiserver-operator_localhost-recovery-serving-signer@1761564659
      auth.openshift.io/certificate-not-after: "2035-10-25T11:30:59Z"
      auth.openshift.io/certificate-not-before: "2025-10-27T11:30:58Z"
      openshift.io/description: Signer used by the kube-apiserver to create serving
        certificates for the kube-apiserver via the service network.
      openshift.io/owning-component: kube-apiserver
    creationTimestamp: "2025-10-27T11:31:04Z"
    labels:
      auth.openshift.io/managed-certificate-type: signer
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            .: {}
            f:auth.openshift.io/certificate-issuer: {}
            f:auth.openshift.io/certificate-not-after: {}
            f:auth.openshift.io/certificate-not-before: {}
            f:openshift.io/description: {}
            f:openshift.io/owning-component: {}
          f:labels:
            .: {}
            f:auth.openshift.io/managed-certificate-type: {}
        f:type: {}
      manager: cluster-kube-apiserver-operator
      operation: Update
      time: "2025-10-27T11:31:04Z"
    name: localhost-recovery-serving-signer
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "6477"
    uid: 36c47b48-1e69-4e27-b15b-4779d353c573
  type: kubernetes.io/tls
- apiVersion: v1
  data:
    tls.crt: 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
    tls.key: MTY3NSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      auth.openshift.io/certificate-issuer: kube-apiserver-localhost-signer
      auth.openshift.io/certificate-not-after: "2035-10-25T10:58:57Z"
      auth.openshift.io/certificate-not-before: "2025-10-27T10:58:57Z"
      openshift.io/description: Signer used by the kube-apiserver to create serving
        certificates for the kube-apiserver via localhost.
      openshift.io/owning-component: kube-apiserver
    creationTimestamp: "2025-10-27T11:18:02Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            .: {}
            f:auth.openshift.io/certificate-issuer: {}
            f:auth.openshift.io/certificate-not-after: {}
            f:auth.openshift.io/certificate-not-before: {}
            f:openshift.io/description: {}
            f:openshift.io/owning-component: {}
        f:type: {}
      manager: cluster-bootstrap
      operation: Update
      time: "2025-10-27T11:18:02Z"
    name: localhost-serving-signer
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "623"
    uid: 4b10a346-834e-452f-95ed-1e16cdb4bbca
  type: kubernetes.io/tls
- apiVersion: v1
  data:
    service-account.key: MzI0MyBieXRlcyBsb25n
    service-account.pub: ODA4IGJ5dGVzIGxvbmc=
  kind: Secret
  metadata:
    creationTimestamp: "2025-10-27T11:17:59Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:service-account.key: {}
          f:service-account.pub: {}
        f:type: {}
      manager: cluster-bootstrap
      operation: Update
      time: "2025-10-27T11:17:59Z"
    name: next-bound-service-account-signing-key
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "616"
    uid: 2d5f83ee-d1e4-4c4e-ba43-0c1d9477e43c
  type: Opaque
- apiVersion: v1
  data:
    tls.crt: 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
    tls.key: MTY3OSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      auth.openshift.io/certificate-issuer: openshift-kube-apiserver-operator_node-system-admin-signer@1761564659
      auth.openshift.io/certificate-not-after: "2027-10-27T11:31:07Z"
      auth.openshift.io/certificate-not-before: "2025-10-27T11:31:06Z"
      certificates.openshift.io/auto-regenerate-after-offline-expiry: https://github.com/openshift/cluster-kube-apiserver-operator/pull/1631,'operator
        conditions kube-apiserver'
      openshift.io/description: Client certificate (system:masters) placed on each
        master to allow communication to kube-apiserver for debugging.
      openshift.io/owning-component: kube-apiserver
    creationTimestamp: "2025-10-27T11:31:10Z"
    labels:
      auth.openshift.io/managed-certificate-type: target
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            .: {}
            f:auth.openshift.io/certificate-issuer: {}
            f:auth.openshift.io/certificate-not-after: {}
            f:auth.openshift.io/certificate-not-before: {}
            f:certificates.openshift.io/auto-regenerate-after-offline-expiry: {}
            f:openshift.io/description: {}
            f:openshift.io/owning-component: {}
          f:labels:
            .: {}
            f:auth.openshift.io/managed-certificate-type: {}
        f:type: {}
      manager: cluster-kube-apiserver-operator
      operation: Update
      time: "2025-10-27T11:31:10Z"
    name: node-system-admin-client
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "6983"
    uid: ff508fbb-a31c-495a-b9a1-fe996b04bc15
  type: kubernetes.io/tls
- apiVersion: v1
  data:
    tls.crt: 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
    tls.key: MTY3NSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      auth.openshift.io/certificate-issuer: openshift-kube-apiserver-operator_node-system-admin-signer@1761564659
      auth.openshift.io/certificate-not-after: "2028-10-26T11:30:59Z"
      auth.openshift.io/certificate-not-before: "2025-10-27T11:30:58Z"
      certificates.openshift.io/auto-regenerate-after-offline-expiry: https://github.com/openshift/cluster-kube-apiserver-operator/pull/1631,'operator
        conditions kube-apiserver'
      openshift.io/description: Signer for the per-master-debugging-client.
      openshift.io/owning-component: kube-apiserver
    creationTimestamp: "2025-10-27T11:31:04Z"
    labels:
      auth.openshift.io/managed-certificate-type: signer
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            .: {}
            f:auth.openshift.io/certificate-issuer: {}
            f:auth.openshift.io/certificate-not-after: {}
            f:auth.openshift.io/certificate-not-before: {}
            f:certificates.openshift.io/auto-regenerate-after-offline-expiry: {}
            f:openshift.io/description: {}
            f:openshift.io/owning-component: {}
          f:labels:
            .: {}
            f:auth.openshift.io/managed-certificate-type: {}
        f:type: {}
      manager: cluster-kube-apiserver-operator
      operation: Update
      time: "2025-10-27T11:31:04Z"
    name: node-system-admin-signer
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "6493"
    uid: 7bc93e09-6c8e-4dcf-8177-eaa93ee2af39
  type: kubernetes.io/tls
- apiVersion: v1
  data:
    tls.crt: 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
    tls.key: MTY3NSBieXRlcyBsb25n
  kind: Secret
  metadata:
    annotations:
      auth.openshift.io/certificate-issuer: kube-apiserver-service-network-signer
      auth.openshift.io/certificate-not-after: "2035-10-25T10:58:57Z"
      auth.openshift.io/certificate-not-before: "2025-10-27T10:58:57Z"
      openshift.io/description: Signer used by the kube-apiserver to create serving
        certificates for the kube-apiserver via the service network.
      openshift.io/owning-component: kube-apiserver
    creationTimestamp: "2025-10-27T11:18:02Z"
    managedFields:
    - apiVersion: v1
      fieldsType: FieldsV1
      fieldsV1:
        f:data:
          .: {}
          f:tls.crt: {}
          f:tls.key: {}
        f:metadata:
          f:annotations:
            .: {}
            f:auth.openshift.io/certificate-issuer: {}
            f:auth.openshift.io/certificate-not-after: {}
            f:auth.openshift.io/certificate-not-before: {}
            f:openshift.io/description: {}
            f:openshift.io/owning-component: {}
        f:type: {}
      manager: cluster-bootstrap
      operation: Update
      time: "2025-10-27T11:18:02Z"
    name: service-network-serving-signer
    namespace: openshift-kube-apiserver-operator
    resourceVersion: "624"
    uid: 23ebdedc-3101-44ef-9d03-9805240e5878
  type: kubernetes.io/tls
kind: SecretList
metadata:
  resourceVersion: "2219964"
