apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  annotations:
    cert-duration: 43800h0m0s
  creationTimestamp: "2025-12-05T13:04:13Z"
  generation: 1
  labels:
    osp-rootca-issuer-internal: ""
  name: rootca-internal
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: b46d8c78-8b30-4750-a021-96f45b15d6d2
  resourceVersion: "28075"
  uid: c84dffa6-2511-4578-b1c8-accac229b1cc
spec:
  ca:
    secretName: rootca-internal
status:
  conditions:
  - lastTransitionTime: "2025-12-05T13:04:14Z"
    message: Signing CA verified
    observedGeneration: 1
    reason: KeyPairVerified
    status: "True"
    type: Ready