suite: Auth ServiceAccount
templates:
  - auth/serviceaccount.yaml
tests:
  - it: sets ServiceAccount annotations when specified
    values:
      - ../.lint/annotations.yaml
    asserts:
      - equal:
          path: metadata.annotations.kubernetes\.io/serviceaccount
          value: test-annotation
      - equal:
          path: metadata.annotations.kubernetes\.io/serviceaccount-different
          value: 6

  - it: changes ServiceAccount name when specified
    values:
      - ../.lint/service-account.yaml
    asserts:
      - equal:
          path: metadata.name
          value: "helm-lint"

  - it: sets Azure client ID when set
    set:
      chartMode: azure
      azure:
        clientID: "1234"
    asserts:
      - equal:
          path: metadata.annotations.azure\.workload\.identity/client-id
          value: "1234"

  - it: sets extraLabels on ServiceAccount
    values:
      - ../.lint/annotations.yaml
    set:
      extraLabels:
        serviceAccount:
          foo: bar
          baz: override-me
      auth:
        extraLabels:
          serviceAccount:
            baz: overridden
    asserts:
      - equal:
          path: metadata.labels.foo
          value: bar
      - equal:
          path: metadata.labels.baz
          value: overridden

  - it: does not set automountServiceAccountToken if cluster version is <1.20
    set:
      clusterName: helm-lint
    capabilities:
      majorVersion: 1
      minorVersion: 18
    asserts:
      - notEqual:
          path: automountServiceAccountToken
          value: false

  - it: sets automountServiceAccountToken to false if cluster version is >=1.20
    set:
      clusterName: helm-lint
    capabilities:
      majorVersion: 1
      minorVersion: 20
    asserts:
      - equal:
          path: automountServiceAccountToken
          value: false