diff --git a/Tests/kaas/plugin/plugin_t8s.py b/Tests/kaas/plugin/plugin_t8s.py
index 28097a025..ca6a62e15 100644
--- a/Tests/kaas/plugin/plugin_t8s.py
+++ b/Tests/kaas/plugin/plugin_t8s.py
@@ -115,6 +115,7 @@ def _build_helmrelease(self) -> dict[str, Any]:
             "spec": {
                 "chartRef": self.hr_chart_ref,
                 "driftDetection": {"mode": "enabled"},
+                "install": {"timeout": "15m"},  # 10m were sufficient in test, but keep some room
                 "interval": "1m",
                 "values": {**self.hr_values_fixed, "version": self.k8s_version},
             },
@@ -234,8 +235,8 @@ def create_cluster(self) -> None:
             core_api = CoreV1Api(api_client)
             co_api = CustomObjectsApi(api_client)
             self._apply_helmrelease(api_client)
-            kubeconfig = self._wait_for_kubeconfig_secret(core_api)
             self._wait_for_helmrelease_ready(co_api)
+            kubeconfig = self._wait_for_kubeconfig_secret(core_api)
             self._write_kubeconfig(kubeconfig)
 
     def delete_cluster(self) -> None:
diff --git a/Tests/kaas/plugin/test_plugin_t8s.py b/Tests/kaas/plugin/test_plugin_t8s.py
index a691a81e0..26db68a82 100644
--- a/Tests/kaas/plugin/test_plugin_t8s.py
+++ b/Tests/kaas/plugin/test_plugin_t8s.py
@@ -293,7 +293,7 @@ def test_create_cluster_order(plugin):
             with patch.object(plugin, "_wait_for_helmrelease_ready", side_effect=lambda co_api: calls.append("wait_ready")):
                 with patch.object(plugin, "_write_kubeconfig", side_effect=lambda data: calls.append(("write", data))):
                     plugin.create_cluster()
-    assert calls == ["apply", "wait_secret", "wait_ready", ("write", b"kubeconfig-data")]
+    assert calls == ["apply", "wait_ready", "wait_secret", ("write", b"kubeconfig-data")]
 
 
 # --- _get_helmrelease_ready ---