---
id: annotations-off
name: "Capability: no custom annotation leaks when unset (OFF)"
description: >-
  Renders the product chart with NO annotation override and asserts that the
  custom annotation key (example.com/owner) is absent from every rendered
  object's metadata. Since the chart has no extraAnnotations/commonAnnotations
  knob and the default render never emits this annotation, this scenario is
  EXPECTED to PASS — confirming no annotation leakage.
labels: {customer: enterprise, profile: compliance}
cluster:
  provider: kind
  k8s_version: v1.36.1
product:
  chart: ./chart
  release: sample
  namespace: sample
  set:
    ingress.enabled: true
asserts:
  - type: smoke-script
    path: chart-test/assertions/annotations-absent.sh
tags: [capability, compliance]
category: capability
capability: annotate-all-objects
tier: capability
mechanisms: ["capability:annotations"]