---
id: labels-off
name: "Capability: no extra-label keys leak when unset (OFF)"
description: >-
  Renders the product chart with NO extra-label overrides and asserts that the
  configured test-label keys (team, cost-center) are absent from every rendered
  object's metadata. Since the chart has no extraLabels/commonLabels knob and
  the default render never emits these keys, this scenario is EXPECTED to PASS
  — confirming no label leakage.
labels: {customer: enterprise, profile: compliance}
cluster:
  provider: kind
  k8s_version: v1.36.1
product:
  chart: ./chart
  release: sample
  namespace: sample
  set:
    ingress.enabled: true
asserts:
  - type: smoke-script
    path: chart-test/assertions/labels-absent.sh
tags: [capability, compliance]
category: capability
capability: label-all-objects
tier: capability
mechanisms: ["capability:labels"]