---
id: certificates-cert-manager-wildcard
name: "cert-manager wildcard certificate"
description: "Installs cert-manager with a self-signed ClusterIssuer, issues a wildcard Certificate with SAN DNS:*.test.local + test.local, and verifies both SANs are present."
labels: {customer: any, profile: tls}
cluster:
  provider: kind
  k8s_version: v1.30.0
  preinstall:
    - kind: helm
      chart: jetstack/cert-manager
      version: v1.14.0
      release: cert-manager
      namespace: cert-manager
      repo:
        name: jetstack
        url: "https://charts.jetstack.io"
      values:
        installCRDs: true
      wait: pods-ready
      wait_timeout: 3m
    - kind: raw_manifest
      path: ./fixtures/selfsigned-clusterissuer.yaml
    - kind: raw_manifest
      path: ./fixtures/wildcard-tls-certificate.yaml
      namespace: sample
product:
  chart: ./chart
  release: sample
  namespace: sample
  set:
    tls.enabled: "false"
asserts:
  - type: helm-status-deployed
    release: sample
    namespace: sample
  - type: pods-ready
    namespace: sample
    timeout: 3m
  - type: smoke-script
    path: chart-test/assertions/cert-manager-wildcard.sh
tags: [nightly]
mechanisms: ['addon:cert-manager']
category: certificates
integration: cert-manager
tier: live