apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  annotations:
    cert-duration: 43800h0m0s
  creationTimestamp: "2025-12-04T22:33:15Z"
  generation: 1
  labels:
    osp-rootca-issuer-internal: ""
  name: rootca-internal
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: 7675d569-5994-460e-a380-6fb59e7e5e8c
  resourceVersion: "26831"
  uid: d8ab9c1b-4c5c-448c-baa0-7c0a5486d378
spec:
  ca:
    secretName: rootca-internal
status:
  conditions:
  - lastTransitionTime: "2025-12-04T22:33:15Z"
    message: Signing CA verified
    observedGeneration: 1
    reason: KeyPairVerified
    status: "True"
    type: Ready