diff --git a/packages/apps/redis/tests/tls_test.yaml b/packages/apps/redis/tests/tls_test.yaml
index 69b97b07c..07c107cd0 100644
--- a/packages/apps/redis/tests/tls_test.yaml
+++ b/packages/apps/redis/tests/tls_test.yaml
@@ -702,6 +702,12 @@ tests:
       - contains:
           path: spec.dnsNames
           content: "rfr-my-redis.tenant-test.svc.cluster.local"
+      - notContains:
+          path: spec.dnsNames
+          content: "my-redis."
+      - notContains:
+          path: spec.dnsNames
+          content: "my-redis.example.com"
 
   # ------------------------------------------------------------------
   # Null and empty forms. The `default (dict)` guard in _tls.tpl covers a nil