---
apiVersion: apiextensions.k8s.io/v1
kind: CustomResourceDefinition
metadata:
  creationTimestamp: "2022-03-08T10:13:56Z"
  generation: 1
  managedFields:
  - apiVersion: apiextensions.k8s.io/v1beta1
    fieldsType: FieldsV1
    fieldsV1:
      f:spec:
        f:conversion:
          .: {}
          f:strategy: {}
        f:group: {}
        f:names:
          f:kind: {}
          f:listKind: {}
          f:plural: {}
          f:singular: {}
        f:preserveUnknownFields: {}
        f:scope: {}
        f:validation:
          .: {}
          f:openAPIV3Schema:
            .: {}
            f:description: {}
            f:properties:
              .: {}
              f:apiVersion:
                .: {}
                f:description: {}
                f:type: {}
              f:kind:
                .: {}
                f:description: {}
                f:type: {}
              f:metadata:
                .: {}
                f:type: {}
              f:spec:
                .: {}
                f:description: {}
                f:properties:
                  .: {}
                  f:targetCert:
                    .: {}
                    f:description: {}
                    f:properties:
                      .: {}
                      f:commonName:
                        .: {}
                        f:description: {}
                        f:minLength: {}
                        f:type: {}
                    f:required: {}
                    f:type: {}
                f:required: {}
                f:type: {}
              f:status:
                .: {}
                f:description: {}
                f:type: {}
            f:required: {}
            f:type: {}
        f:version: {}
        f:versions: {}
      f:status:
        f:storedVersions: {}
    manager: cluster-version-operator
    operation: Update
    time: "2022-03-08T10:13:56Z"
  - apiVersion: apiextensions.k8s.io/v1
    fieldsType: FieldsV1
    fieldsV1:
      f:status:
        f:acceptedNames:
          f:kind: {}
          f:listKind: {}
          f:plural: {}
          f:singular: {}
        f:conditions: {}
    manager: kube-apiserver
    operation: Update
    time: "2022-03-08T10:13:56Z"
  name: operatorpkis.network.operator.openshift.io
  resourceVersion: "1100"
  selfLink: /apis/apiextensions.k8s.io/v1/customresourcedefinitions/operatorpkis.network.operator.openshift.io
  uid: 927696ed-9ae6-4f75-89e0-f73a815049c6
spec:
  conversion:
    strategy: None
  group: network.operator.openshift.io
  names:
    kind: OperatorPKI
    listKind: OperatorPKIList
    plural: operatorpkis
    singular: operatorpki
  scope: Namespaced
  versions:
  - name: v1
    schema:
      openAPIV3Schema:
        description: "OperatorPKI is a simple certificate authority. It is not intended for external use - rather, it is internal to the network operator. The CNO creates a CA and a certificate signed by that CA. The certificate has both ClientAuth and ServerAuth extended usages enabled. \n  More specifically, given an OperatorPKI with <name>, the CNO will manage: - A Secret called <name>-ca with two data keys:   - tls.key - the private key   - tls.crt - the CA certificate - A ConfigMap called <name>-ca with a single data key:   - cabundle.crt - the CA certificate(s) - A Secret called <name>-cert with two data keys:   - tls.key - the private key   - tls.crt - the certificate, signed by the CA \n The CA certificate will have a validity of 10 years, rotated after 9. The target certificate will have a validity of 6 months, rotated after 3 \n The CA certificate will have a CommonName of \"<namespace>_<name>-ca@<timestamp>\", where <timestamp> is the last rotation time."
        properties:
          apiVersion:
            description: 'APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources'
            type: string
          kind:
            description: 'Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds'
            type: string
          metadata:
            type: object
          spec:
            description: OperatorPKISpec is the PKI configuration.
            properties:
              targetCert:
                description: targetCert configures the certificate signed by the CA. It will have both ClientAuth and ServerAuth enabled
                properties:
                  commonName:
                    description: commonName is the value in the certificate's CN
                    minLength: 1
                    type: string
                required:
                - commonName
                type: object
            required:
            - targetCert
            type: object
          status:
            description: OperatorPKIStatus is not implemented.
            type: object
        required:
        - spec
        type: object
    served: true
    storage: true
status:
  acceptedNames:
    kind: OperatorPKI
    listKind: OperatorPKIList
    plural: operatorpkis
    singular: operatorpki
  conditions:
  - lastTransitionTime: "2022-03-08T10:13:56Z"
    message: no conflicts found
    reason: NoConflicts
    status: "True"
    type: NamesAccepted
  - lastTransitionTime: "2022-03-08T10:13:56Z"
    message: the initial names have been accepted
    reason: InitialNamesAccepted
    status: "True"
    type: Established
  storedVersions:
  - v1
