suite: Admin secret template
release:
  name: gitea-unittests
  namespace: testing
templates:
  - templates/secret_admin.yaml
tests:
  - it: "Skip rendering when the admin user is disabled"
    set:
      secrets.admin.enabled: false
    asserts:
      - hasDocuments:
          count: 0

  - it: "Skip rendering when an existing Secret is referenced"
    set:
      secrets.admin.enabled: true
      secrets.admin.existingSecret.enabled: true
      secrets.admin.existingSecret.secretName: "external-secret-reference"
    asserts:
      - hasDocuments:
          count: 0

  - it: "Fail when no credentials are configured"
    set:
      secrets.admin.new.password: ""
    asserts:
      - failedTemplate:
          errorMessage: Either specify `secrets.admin.new.username` and `secrets.admin.new.password` or reference an existing Secret via `secrets.admin.existingSecret`

  - it: "Render the Secret with the default credentials"
    asserts:
      - hasDocuments:
          count: 1
      - documentIndex: 0
        containsDocument:
          kind: Secret
          apiVersion: v1
          name: gitea-unittests-admin
      - isNotNullOrEmpty:
          path: metadata.labels
      - equal:
          path: data.email
          value: "Z2l0ZWFAbG9jYWwuZG9tYWlu"
      - equal:
          path: data.password
          value: "cjhzQThDUEhEOSFidDZk"
      - equal:
          path: data.username
          value: "Z2l0ZWFfYWRtaW4="

  - it: "Render custom annotations and labels"
    set:
      secrets.admin.new.annotations:
        custom-annotation: annotation-value
      secrets.admin.new.labels:
        custom-label: label-value
    asserts:
      - equal:
          path: metadata.annotations["custom-annotation"]
          value: annotation-value
      - equal:
          path: metadata.labels["custom-label"]
          value: label-value