apiVersion: cert-manager.io/v1 kind: Certificate metadata: creationTimestamp: "2025-12-05T13:04:16Z" generation: 1 name: rootca-ovn namespace: openstack ownerReferences: - apiVersion: core.openstack.org/v1beta1 blockOwnerDeletion: true controller: true kind: OpenStackControlPlane name: controlplane uid: b46d8c78-8b30-4750-a021-96f45b15d6d2 resourceVersion: "28166" uid: 8747b1ac-60ff-4c53-b522-0fcbeeabbb61 spec: commonName: rootca-ovn duration: 87600h0m0s isCA: true issuerRef: name: selfsigned-issuer privateKey: algorithm: RSA size: 3072 secretName: rootca-ovn secretTemplate: labels: ca-cert: "" status: conditions: - lastTransitionTime: "2025-12-05T13:04:17Z" message: Certificate is up to date and has not expired observedGeneration: 1 reason: Ready status: "True" type: Ready notAfter: "2035-12-03T13:04:17Z" notBefore: "2025-12-05T13:04:17Z" renewalTime: "2032-08-03T21:04:17Z" revision: 1