apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  creationTimestamp: "2025-10-11T10:54:24Z"
  generation: 1
  labels:
    osctlplane-service: keystone
    service-cert: ""
  name: keystone-public-route
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: b58026d9-78f6-41aa-860f-3c207e5b077b
  resourceVersion: "39143"
  uid: 735f53d1-4b93-4b5e-a3c4-b7f963f5c747
spec:
  dnsNames:
  - keystone-public-openstack.apps.ocp.openstack.lab
  duration: 43800h0m0s
  issuerRef:
    group: cert-manager.io
    kind: Issuer
    name: rootca-public
  secretName: cert-keystone-public-route
  secretTemplate:
    labels:
      osctlplane-service: keystone
      service-cert: ""
  usages:
  - key encipherment
  - digital signature
  - server auth
status:
  conditions:
  - lastTransitionTime: "2025-10-11T10:54:25Z"
    message: Certificate is up to date and has not expired
    observedGeneration: 1
    reason: Ready
    status: "True"
    type: Ready
  notAfter: "2030-10-10T10:54:25Z"
  notBefore: "2025-10-11T10:54:25Z"
  renewalTime: "2029-02-09T02:54:25Z"
  revision: 1