apiVersion: cert-manager.io/v1
kind: Issuer
metadata:
  annotations:
    cert-duration: 43800h0m0s
  creationTimestamp: "2025-12-04T12:19:09Z"
  generation: 1
  labels:
    osp-rootca-issuer-internal: ""
  name: rootca-internal
  namespace: openstack
  ownerReferences:
  - apiVersion: core.openstack.org/v1beta1
    blockOwnerDeletion: true
    controller: true
    kind: OpenStackControlPlane
    name: controlplane
    uid: 0c69e897-bda0-4452-b6d5-e1c6039ef73e
  resourceVersion: "29351"
  uid: 21486000-ca4d-4f03-ae31-a982c78aab97
spec:
  ca:
    secretName: rootca-internal
status:
  conditions:
  - lastTransitionTime: "2025-12-04T12:19:12Z"
    message: Signing CA verified
    observedGeneration: 1
    reason: KeyPairVerified
    status: "True"
    type: Ready