---
id: certificates-manual-tls-secret-basic
name: "manual-tls-secret basic"
description: "Delivers a pre-provisioned TLS Secret (RSA 2048) via raw_manifest preinstall and verifies the chart serves HTTPS with it. No cert-manager dependency."
labels: {customer: any, profile: tls}
cluster:
  provider: kind
  k8s_version: v1.36.1
  preinstall:
    - kind: raw_manifest
      path: chart-test/fixtures/certificates/manual-tls/manual-tls-basic-secret.yaml
      namespace: sample
  helm_timeout: 10m
product:
  chart: ./chart
  release: sample
  namespace: sample
  set:
    tls.enabled: "true"
    tls.secretName: manual-tls-basic
    tls.servicePort: "443"
asserts:
  - type: helm-status-deployed
    release: sample
    namespace: sample
  - type: pods-ready
    namespace: sample
    timeout: 5m
  - type: smoke-script
    path: chart-test/assertions/manual-tls-basic.sh
tags: [nightly]
mechanisms: ['addon:manual-tls-secret']
category: certificates
integration: manual-tls-secret
tier: live