apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  creationTimestamp: "2025-12-03T22:22:49Z"
  generation: 1
  labels:
    service-cert: ""
  name: galera-openstack-svc
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: baebb606-0aee-480e-936d-ecfd322a7e8c
  resourceVersion: "27706"
  uid: c438c0a8-438a-4b3f-9696-e52463fcc897
spec:
  dnsNames:
  - '*.openstack-galera.openstack.svc'
  - '*.openstack-galera.openstack.svc.cluster.local'
  - openstack-galera.openstack.svc
  - openstack-galera.openstack.svc.cluster.local
  - openstack.openstack.svc
  - openstack.openstack.svc.cluster.local
  duration: 43800h0m0s
  issuerRef:
    group: cert-manager.io
    kind: Issuer
    name: rootca-internal
  secretName: cert-galera-openstack-svc
  secretTemplate:
    labels:
      service-cert: ""
  subject:
    organizations:
    - openstack.cluster.local
  usages:
  - key encipherment
  - digital signature
  - server auth
  - client auth
status:
  conditions:
  - lastTransitionTime: "2025-12-03T22:22:51Z"
    message: Certificate is up to date and has not expired
    observedGeneration: 1
    reason: Ready
    status: "True"
    type: Ready
  notAfter: "2030-12-02T22:22:51Z"
  notBefore: "2025-12-03T22:22:51Z"
  renewalTime: "2029-04-03T14:22:51Z"
  revision: 1