apiVersion: cert-manager.io/v1 kind: Certificate metadata: creationTimestamp: "2025-10-11T10:52:44Z" generation: 1 name: rootca-libvirt namespace: openstack ownerReferences: - apiVersion: core.openstack.org/v1beta1 blockOwnerDeletion: true controller: true kind: OpenStackControlPlane name: controlplane uid: b58026d9-78f6-41aa-860f-3c207e5b077b resourceVersion: "33899" uid: 8fc8f0c4-7956-45df-80e8-7ebf5013e8f1 spec: commonName: rootca-libvirt duration: 87600h0m0s isCA: true issuerRef: name: selfsigned-issuer privateKey: algorithm: RSA size: 3072 secretName: rootca-libvirt secretTemplate: labels: ca-cert: "" status: conditions: - lastTransitionTime: "2025-10-11T10:52:45Z" message: Certificate is up to date and has not expired observedGeneration: 1 reason: Ready status: "True" type: Ready notAfter: "2035-10-09T10:52:45Z" notBefore: "2025-10-11T10:52:45Z" renewalTime: "2032-06-09T18:52:45Z" revision: 1