# Test Certificate — verifies cert-manager + selfsigned-issuer are working.
#
# Apply:
#   kubectl apply -f test-certificate.yaml
#
# Verify:
#   kubectl get certificate -n cert-manager-test
#   kubectl describe certificate selfsigned-test -n cert-manager-test
#   # READY=True means cert-manager is operational.
#
# Clean up after verification:
#   kubectl delete namespace cert-manager-test

apiVersion: v1
kind: Namespace
metadata:
  name: cert-manager-test
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: selfsigned-test
  namespace: cert-manager-test
spec:
  secretName: selfsigned-test-tls
  duration: 24h
  renewBefore: 1h
  issuerRef:
    name: selfsigned-issuer
    kind: ClusterIssuer
  commonName: test.net-kingdom.internal
  dnsNames:
    - test.net-kingdom.internal