apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  creationTimestamp: "2025-12-05T13:04:13Z"
  generation: 1
  name: rootca-internal
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: b46d8c78-8b30-4750-a021-96f45b15d6d2
  resourceVersion: "28085"
  uid: e7e08b3a-6af4-4899-bbbf-9f2d7445ac1f
spec:
  commonName: rootca-internal
  duration: 87600h0m0s
  isCA: true
  issuerRef:
    name: selfsigned-issuer
  privateKey:
    algorithm: RSA
    size: 3072
  secretName: rootca-internal
  secretTemplate:
    labels:
      ca-cert: ""
status:
  conditions:
  - lastTransitionTime: "2025-12-05T13:04:14Z"
    message: Certificate is up to date and has not expired
    observedGeneration: 1
    reason: Ready
    status: "True"
    type: Ready
  notAfter: "2035-12-03T13:04:14Z"
  notBefore: "2025-12-05T13:04:14Z"
  renewalTime: "2032-08-03T21:04:14Z"
  revision: 1