certmanager v1.21.1

Certificate.status

Status of the Certificate. This is set and managed automatically. Read-only. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#spec-and-status

9 fields
Certificate.status fields and descriptions
Field / TypeDescription
object

ACME stores information that is fetched from the ACME CA server.

object[]

List of status conditions to indicate the status of certificates. Known condition types are `Ready` and `Issuing`.

  • x-kubernetes-list-map-keys: ["type"]
  • x-kubernetes-list-type: "map"
failedIssuanceAttempts
integer

The number of continuous failed issuance attempts up till now. This field gets removed (if set) on a successful issuance and gets set to 1 if unset and an issuance has failed. If an issuance has failed, the delay till the next issuance will be calculated using formula time.Hour * 2 ^ (failedIssuanceAttempts - 1).

lastFailureTime
string

LastFailureTime is set only if the latest issuance for this Certificate failed and contains the time of the failure. If an issuance has failed, the delay till the next issuance will be calculated using formula time.Hour * 2 ^ (failedIssuanceAttempts - 1). If the latest issuance has succeeded this field will be unset.

  • format: date-time
nextPrivateKeySecretName
string

The name of the Secret resource containing the private key to be used for the next certificate iteration. The keymanager controller will automatically set this field if the `Issuing` condition is set to `True`. It will automatically unset this field when the Issuing condition is not set or False.

notAfter
string

The expiration time of the certificate stored in the secret named by this resource in `spec.secretName`.

  • format: date-time
notBefore
string

The time after which the certificate stored in the secret named by this resource in `spec.secretName` is valid.

  • format: date-time
renewalTime
string

RenewalTime is the time at which the certificate will be next renewed. If not set, no upcoming renewal is scheduled.

  • format: date-time
revision
integer

The current 'revision' of the certificate as issued. When a CertificateRequest resource is created, it will have the `cert-manager.io/certificate-revision` set to one greater than the current value of this field. Upon issuance, this field will be set to the value of the annotation on the CertificateRequest resource used to issue the certificate. Persisting the value on the CertificateRequest resource allows the certificates controller to know whether a request is part of an old issuance or if it is part of the ongoing revision's issuance by checking if the revision value in the annotation is greater than this field.