102 lines
2.6 KiB
YAML
102 lines
2.6 KiB
YAML
suite: Secret
|
|
templates:
|
|
- secret.yaml
|
|
tests:
|
|
- it: generate a secret when neither authToken nor joinParams.tokenName are provided
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
- isKind:
|
|
of: Secret
|
|
- matchSnapshot: {}
|
|
- it: generates a secret when authToken is provided
|
|
set:
|
|
authToken: sample-auth-token-dont-use-this
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
- isKind:
|
|
of: Secret
|
|
- equal:
|
|
path: metadata.name
|
|
value: teleport-kube-agent-join-token
|
|
- matchSnapshot: {}
|
|
|
|
- it: generates a secret when joinParams.tokenName is provided
|
|
set:
|
|
joinParams:
|
|
tokenName: sample-auth-token-dont-use-this
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
- isKind:
|
|
of: Secret
|
|
- equal:
|
|
path: metadata.name
|
|
value: teleport-kube-agent-join-token
|
|
- matchSnapshot: {}
|
|
|
|
- it: generates a secret with a custom name when authToken and secretName are provided
|
|
set:
|
|
authToken: sample-auth-token-dont-use-this
|
|
secretName: some-other-secret-name
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
- isKind:
|
|
of: Secret
|
|
- equal:
|
|
path: metadata.name
|
|
value: some-other-secret-name
|
|
- matchSnapshot: {}
|
|
|
|
- it: generates a secret with a custom name when authToken and joinTokenSecret.name are provided
|
|
set:
|
|
authToken: sample-auth-token-dont-use-this
|
|
joinTokenSecret:
|
|
name: some-other-secret-name
|
|
create: true
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
- isKind:
|
|
of: Secret
|
|
- equal:
|
|
path: metadata.name
|
|
value: some-other-secret-name
|
|
- matchSnapshot: {}
|
|
|
|
- it: does not create a secret when joinTokenSecret.create is false
|
|
set:
|
|
authToken: sample-auth-token-dont-use-this
|
|
joinTokenSecret:
|
|
name: some-other-secret-name
|
|
create: false
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
- it: sets Secret labels when specified
|
|
values:
|
|
- ../.lint/extra-labels.yaml
|
|
asserts:
|
|
- equal:
|
|
path: metadata.labels.app\.kubernetes\.io/name
|
|
value: teleport-kube-agent
|
|
- equal:
|
|
path: metadata.labels.resource
|
|
value: secret
|
|
- matchSnapshot: {}
|
|
|
|
- it: sets Secret annotations when specified
|
|
values:
|
|
- ../.lint/annotations.yaml
|
|
asserts:
|
|
- equal:
|
|
path: metadata.annotations.kubernetes\.io/secret
|
|
value: test-annotation
|
|
- equal:
|
|
path: metadata.annotations.kubernetes\.io/secret-different
|
|
value: 6
|
|
- matchSnapshot: {}
|