--- certificate.yaml apiVersion: cert-manager.io/v1 kind: Certificate metadata: annotations: meta.helm.sh/release-name: namespace-certificates meta.helm.sh/release-namespace: istio-system creationTimestamp: "2022-01-05T16:51:51Z" generation: 3 labels: app: raw app.kubernetes.io/managed-by: Helm chart: raw-0.3.0 heritage: Helm release: namespace-certificates name: toolhub namespace: istio-system resourceVersion: "70592093" selfLink: /apis/cert-manager.io/v1/namespaces/istio-system/certificates/toolhub uid: 633f18fa-5d4b-4a81-a308-5fe694bcfc16 spec: commonName: toolhub.staging.discovery.wmnet dnsNames: - toolhub.staging.discovery.wmnet - toolhub.staging.svc.codfw.wmnet - toolhub.staging.svc.eqiad.wmnet issuerRef: group: cfssl-issuer.wikimedia.org kind: ClusterIssuer name: discovery revisionHistoryLimit: 2 secretName: toolhub-tls-certificate status: conditions: - lastTransitionTime: "2022-02-02T11:59:35Z" message: Certificate is up to date and has not expired observedGeneration: 2 reason: Ready status: "True" type: Ready - lastTransitionTime: "2022-02-06T17:00:03Z" message: Renewing certificate as renewal was scheduled at 2022-02-06 17:00:00 +0000 UTC observedGeneration: 2 reason: Renewing status: "True" type: Issuing nextPrivateKeySecretName: toolhub-rrvtj notAfter: "2022-02-07T01:00:00Z" notBefore: "2022-02-06T01:00:00Z" renewalTime: "2022-02-06T17:00:00Z" revision: 48 --- certificaterequests.yaml apiVersion: v1 items: - apiVersion: cert-manager.io/v1 kind: CertificateRequest metadata: annotations: cert-manager.io/certificate-name: toolhub cert-manager.io/certificate-revision: "49" cert-manager.io/private-key-secret-name: toolhub-rrvtj meta.helm.sh/release-name: namespace-certificates meta.helm.sh/release-namespace: istio-system creationTimestamp: "2022-02-06T17:01:59Z" generateName: toolhub- generation: 1 labels: app: raw app.kubernetes.io/managed-by: Helm chart: raw-0.3.0 heritage: Helm release: namespace-certificates name: toolhub-l8xjm namespace: istio-system ownerReferences: - apiVersion: cert-manager.io/v1 blockOwnerDeletion: true controller: true kind: Certificate name: toolhub uid: 633f18fa-5d4b-4a81-a308-5fe694bcfc16 resourceVersion: "69919960" selfLink: /apis/cert-manager.io/v1/namespaces/istio-system/certificaterequests/toolhub-l8xjm uid: 8242a434-123e-4e6e-9b0c-c4bee2794858 spec: groups: - system:serviceaccounts - system:serviceaccounts:cert-manager - system:authenticated issuerRef: group: cfssl-issuer.wikimedia.org kind: ClusterIssuer name: discovery request: REDACTED uid: 488d8d67-1334-40bc-aa82-ce674407d5b8 username: system:serviceaccount:cert-manager:cert-manager status: ca: REDACTED certificate: REDACTED conditions: - lastTransitionTime: "2022-02-06T17:08:04Z" message: Certificate request has been approved by cert-manager.io reason: cert-manager.io status: "True" type: Approved - lastTransitionTime: "2022-02-06T17:08:08Z" message: Signed reason: Issued status: "True" type: Ready - apiVersion: cert-manager.io/v1 kind: CertificateRequest metadata: annotations: cert-manager.io/certificate-name: toolhub cert-manager.io/certificate-revision: "49" cert-manager.io/private-key-secret-name: toolhub-rrvtj meta.helm.sh/release-name: namespace-certificates meta.helm.sh/release-namespace: istio-system creationTimestamp: "2022-02-06T17:04:19Z" generateName: toolhub- generation: 1 labels: app: raw app.kubernetes.io/managed-by: Helm chart: raw-0.3.0 heritage: Helm release: namespace-certificates name: toolhub-wvz2q namespace: istio-system ownerReferences: - apiVersion: cert-manager.io/v1 blockOwnerDeletion: true controller: true kind: Certificate name: toolhub uid: 633f18fa-5d4b-4a81-a308-5fe694bcfc16 resourceVersion: "69919955" selfLink: /apis/cert-manager.io/v1/namespaces/istio-system/certificaterequests/toolhub-wvz2q uid: 69c74c6b-28ea-4b6d-b455-9c2a6d50ada1 spec: groups: - system:serviceaccounts - system:serviceaccounts:cert-manager - system:authenticated issuerRef: group: cfssl-issuer.wikimedia.org kind: ClusterIssuer name: discovery request: REDACTED uid: 488d8d67-1334-40bc-aa82-ce674407d5b8 username: system:serviceaccount:cert-manager:cert-manager status: ca: REDACTED certificate: REDACTED conditions: - lastTransitionTime: "2022-02-06T17:08:03Z" message: Certificate request has been approved by cert-manager.io reason: cert-manager.io status: "True" type: Approved - lastTransitionTime: "2022-02-06T17:08:07Z" message: Signed reason: Issued status: "True" type: Ready kind: List metadata: resourceVersion: "" selfLink: "" --- secrets.yaml apiVersion: v1 items: - apiVersion: v1 data: tls.key: REDACTED kind: Secret metadata: creationTimestamp: "2022-02-06T17:00:05Z" generateName: toolhub- labels: cert-manager.io/next-private-key: "true" name: toolhub-rrvtj namespace: istio-system ownerReferences: - apiVersion: cert-manager.io/v1 blockOwnerDeletion: true controller: true kind: Certificate name: toolhub uid: 633f18fa-5d4b-4a81-a308-5fe694bcfc16 resourceVersion: "69917641" selfLink: /api/v1/namespaces/istio-system/secrets/toolhub-rrvtj uid: f0b3777c-d7b9-444f-85be-fe5af10122b7 type: Opaque - apiVersion: v1 data: ca.crt: REDACTED tls.crt: REDACTED tls.key: REDACTED kind: Secret metadata: annotations: cert-manager.io/alt-names: toolhub.staging.discovery.wmnet,toolhub.staging.svc.codfw.wmnet,toolhub.staging.svc.eqiad.wmnet cert-manager.io/certificate-name: toolhub cert-manager.io/common-name: toolhub.staging.discovery.wmnet cert-manager.io/ip-sans: "" cert-manager.io/issuer-group: cfssl-issuer.wikimedia.org cert-manager.io/issuer-kind: ClusterIssuer cert-manager.io/issuer-name: discovery cert-manager.io/uri-sans: "" creationTimestamp: "2022-01-05T16:54:24Z" name: toolhub-tls-certificate namespace: istio-system resourceVersion: "69672832" selfLink: /api/v1/namespaces/istio-system/secrets/toolhub-tls-certificate uid: 0f4ab52c-8ce5-4bf0-a5cc-edcdfad937e0 type: kubernetes.io/tls kind: List metadata: resourceVersion: "" selfLink: ""