Working with willcard and dynamic branch

[TarasMalanyuk]

Consiguration zone

zone IN NS ns
ns IN A 127.0.0.1
@ IN A 127.0.0.1
* IN A 172.0.0.1

Giv error

kubectl get cert  -A
NAMESPACE               NAME                                        READY                    SECRET                                      AGE
cert-manager            cert-manager-webhook-dnsimple-ca                    True    cert-manager-webhook-dnsimple-ca            31d
cert-manager            cert-manager-webhook-dnsimple-webhook-tls   True    cert-manager-webhook-dnsimple-webhook-tls   31d
app                             cert-app                                                                    False   tls-app           3d20h

Describe

apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  annotations:
    meta.helm.sh/release-name: cert-app
    meta.helm.sh/release-namespace: app
  creationTimestamp: "2022-09-07T12:58:32Z"
  generation: 1
  labels:
    app.kubernetes.io/managed-by: Helm
  name: cert-app
  namespace: app
  resourceVersion: "375638018"
  uid: f5ca2340-79f9-4804-af32-fba9d5e32067
spec:
  dnsNames:
  - <protected>
  issuerRef:
    kind: ClusterIssuer
    name: clusterissuer-dnsimple-zerossl
  secretName: tls-app
status:
  conditions:
  - lastTransitionTime: "2022-09-07T12:58:32Z"
    message: Issuing certificate as Secret does not exist
    observedGeneration: 1
    reason: DoesNotExist
    status: "False"
    type: Ready
  - lastTransitionTime: "2022-09-07T12:58:32Z"
    message: Issuing certificate as Secret does not exist
    observedGeneration: 1
    reason: DoesNotExist
    status: "True"
    type: Issuing
  nextPrivateKeySecretName: cert-app