suite: deployment template (checksum annotations)
release:
  name: gitea-unittests
  namespace: testing
templates:
  - templates/gitea/deployment.yaml
  - templates/gitea/secret_admin.yaml
  - templates/gitea/secret_config.yaml
  - templates/gitea/secret_gpg.yaml
  - templates/gitea/secret_init.yaml
  - templates/gitea/secret_inlineConfig.yaml
  - templates/gitea/secret_metrics.yaml
tests:
  - it: omits the checksum annotations by default
    template: templates/gitea/deployment.yaml
    set:
      secrets.admin.enabled: true
      secrets.config.enabled: true
      secrets.gpg.enabled: true
      secrets.gpg.new.privateKey: |
        -----BEGIN PGP PRIVATE KEY BLOCK-----
        -----END PGP PRIVATE KEY BLOCK-----
      secrets.init.enabled: true
      secrets.inlineConfig.enabled: true
      secrets.metrics.enabled: true
    asserts:
      - notExists:
          path: spec.template.metadata.annotations["checksum/admin"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/config"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/gpg"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/init"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/inlineConfig"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/metrics"]

  - it: adds a checksum annotation for every Secret when addSHASumAnnotation is enabled
    template: templates/gitea/deployment.yaml
    set:
      secrets.admin.addSHASumAnnotation: true
      secrets.admin.enabled: true

      secrets.config.addSHASumAnnotation: true
      secrets.config.enabled: true

      secrets.gpg.addSHASumAnnotation: true
      secrets.gpg.enabled: true
      secrets.gpg.new.privateKey: |
        -----BEGIN PGP PRIVATE KEY BLOCK-----
        -----END PGP PRIVATE KEY BLOCK-----

      secrets.init.addSHASumAnnotation: true
      secrets.init.enabled: true

      secrets.inlineConfig.addSHASumAnnotation: true
      secrets.inlineConfig.enabled: true

      secrets.metrics.addSHASumAnnotation: true
      secrets.metrics.enabled: true
    asserts:
      - exists:
          path: spec.template.metadata.annotations["checksum/admin"]
      - exists:
          path: spec.template.metadata.annotations["checksum/config"]
      - exists:
          path: spec.template.metadata.annotations["checksum/gpg"]
      - exists:
          path: spec.template.metadata.annotations["checksum/init"]
      - exists:
          path: spec.template.metadata.annotations["checksum/inlineConfig"]
      - exists:
          path: spec.template.metadata.annotations["checksum/metrics"]

  - it: omits the checksum annotation of a single disabled Secret only
    template: templates/gitea/deployment.yaml
    set:
      secrets.admin.addSHASumAnnotation: false
      secrets.admin.enabled: true

      secrets.config.addSHASumAnnotation: false
      secrets.config.enabled: true

      secrets.gpg.addSHASumAnnotation: false
      secrets.gpg.enabled: true
      secrets.gpg.new.privateKey: |
        -----BEGIN PGP PRIVATE KEY BLOCK-----
        -----END PGP PRIVATE KEY BLOCK-----

      secrets.init.addSHASumAnnotation: false
      secrets.init.enabled: true

      secrets.inlineConfig.addSHASumAnnotation: false
      secrets.inlineConfig.enabled: true

      secrets.metrics.addSHASumAnnotation: false
      secrets.metrics.enabled: true
    asserts:
      - notExists:
          path: spec.template.metadata.annotations["checksum/admin"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/config"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/gpg"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/init"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/inlineConfig"]
      - notExists:
          path: spec.template.metadata.annotations["checksum/metrics"]

  - it: adds the checksum of Secrets provided by the user
    template: templates/gitea/deployment.yaml
    set:
      secrets.admin.enabled: true
      secrets.admin.addSHASumAnnotation: true
      secrets.admin.existingSecret.enabled: true
      secrets.admin.existingSecret.secretName: custom-admin

      secrets.config.enabled: true
      secrets.config.addSHASumAnnotation: true
      secrets.config.existingSecret.enabled: true
      secrets.config.existingSecret.secretName: custom-config

      secrets.gpg.enabled: true
      secrets.gpg.addSHASumAnnotation: true
      secrets.gpg.existingSecret.enabled: true
      secrets.gpg.existingSecret.secretName: custom-gpg

      secrets.init.enabled: true
      secrets.init.addSHASumAnnotation: true
      secrets.init.existingSecret.enabled: true
      secrets.init.existingSecret.secretName: custom-init

      secrets.inlineConfig.enabled: true
      secrets.inlineConfig.addSHASumAnnotation: true
      secrets.inlineConfig.existingSecret.enabled: true
      secrets.inlineConfig.existingSecret.secretName: custom-inline-config

      secrets.metrics.enabled: true
      secrets.metrics.addSHASumAnnotation: true
      secrets.metrics.existingSecret.enabled: true
      secrets.metrics.existingSecret.secretName: custom-metrics
    asserts:
      - exists:
          path: spec.template.metadata.annotations["checksum/admin"]
      - exists:
          path: spec.template.metadata.annotations["checksum/config"]
      - exists:
          path: spec.template.metadata.annotations["checksum/gpg"]
      - exists:
          path: spec.template.metadata.annotations["checksum/init"]
      - exists:
          path: spec.template.metadata.annotations["checksum/inlineConfig"]
      - exists:
          path: spec.template.metadata.annotations["checksum/metrics"]