apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  creationTimestamp: "2026-04-02T14:02:38Z"
  generation: 1
  labels:
    endpoint: internal
    osctlplane: ""
    osctlplane-service: nova-metadata
    service: nova-metadata
    type: central
  name: nova-metadata-internal-svc
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: c96825ef-a938-40d5-9209-784ed6ac64b0
  resourceVersion: "47555"
  uid: fd893804-8084-4d01-be3b-689131097dfd
spec:
  dnsNames:
  - nova-metadata-internal.openstack.svc
  duration: 8760h0m0s
  issuerRef:
    group: cert-manager.io
    kind: Issuer
    name: rootca-internal
  secretName: cert-nova-metadata-internal-svc
  secretTemplate:
    labels:
      endpoint: internal
      osctlplane: ""
      osctlplane-service: nova-metadata
      service: nova-metadata
      type: central
  usages:
  - key encipherment
  - digital signature
  - server auth
status:
  conditions:
  - lastTransitionTime: "2026-04-02T14:02:38Z"
    message: Certificate is up to date and has not expired
    observedGeneration: 1
    reason: Ready
    status: "True"
    type: Ready
  notAfter: "2027-04-02T14:02:38Z"
  notBefore: "2026-04-02T14:02:38Z"
  renewalTime: "2026-12-01T22:02:38Z"
  revision: 1