# ------------------------------------------------------------------------------
# Wildcard certificate for fastpass cluster
# Covers *.local.mk-labs.cloud — all cluster services use this cert
# Issued via letsencrypt-prod (staging validated during hello-world test)
# ------------------------------------------------------------------------------
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: fastpass-wildcard-tls
  namespace: gateway
spec:
  secretName: fastpass-wildcard-tls
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
  dnsNames:
    - "*.local.mk-labs.cloud"