suite: GPG secret template (signing enabled)
release:
  name: gitea-unittests
  namespace: testing
templates:
  - templates/gitea/secret_gpg.yaml
tests:
  - it: fails rendering when nothing is configured
    set:
      secrets.gpg.enabled: true
    asserts:
      - failedTemplate:
          errorMessage: Either specify `secrets.gpg.new.privateKey` or reference an existing Secret via `secrets.gpg.existingSecret`
  - it: skips rendering using external secret reference
    set:
      secrets.gpg.enabled: true
      secrets.gpg.existingSecret.enabled: true
      secrets.gpg.existingSecret.secretName: "external-secret-reference"
    asserts:
      - hasDocuments:
          count: 0
  - it: renders secret specification using inline gpg key
    set:
      secrets.gpg.enabled: true
      secrets.gpg.new.privateKey: "gpg-key-placeholder"
    asserts:
      - hasDocuments:
          count: 1
      - documentIndex: 0
        containsDocument:
          kind: Secret
          apiVersion: v1
          name: gitea-unittests-gpg-key
      - isNotNullOrEmpty:
          path: metadata.labels
      - equal:
          path: data.gpgHome
          value: "L2RhdGEvZ2l0Ly5nbnVwZw=="
      - equal:
          path: data.privateKey
          value: "Z3BnLWtleS1wbGFjZWhvbGRlcg=="