#!/usr/bin/env bash
set -euo pipefail

# cert-manager v1.18.6 matches the current lab cluster's Kubernetes 1.30.x
# compatibility window better than newer cert-manager releases.
VERSION="${1:-v1.18.6}"

kubectl apply -f "https://github.com/cert-manager/cert-manager/releases/download/${VERSION}/cert-manager.yaml"
kubectl -n cert-manager wait --for=condition=Available deployment --all --timeout=180s