suite: Test gpg secret with signing enabled
release:
  name: gitea-unittests
  namespace: testing
templates:
  - templates/secret_gpg.yaml
tests:
  - it: "Fail when no gpg key is configured"
    set:
      secrets.gpg.enabled: true
    asserts:
      - failedTemplate:
          errorMessage: Either specify `secrets.gpg.new.privateKey` or reference an existing Secret via `secrets.gpg.existingSecret`
  - it: "Skip rendering when an existing Secret is referenced"
    set:
      secrets.gpg.enabled: true
      secrets.gpg.existingSecret.enabled: true
      secrets.gpg.existingSecret.secretName: "external-secret-reference"
    asserts:
      - hasDocuments:
          count: 0
  - it: "Render the Secret with an inline gpg key"
    set:
      secrets.gpg.enabled: true
      secrets.gpg.new.privateKey: "gpg-key-placeholder"
    asserts:
      - hasDocuments:
          count: 1
      - documentIndex: 0
        containsDocument:
          kind: Secret
          apiVersion: v1
          name: gitea-unittests-gpg-key
      - isNotNullOrEmpty:
          path: metadata.labels
      - equal:
          path: data.gpgHome
          value: "L2RhdGEvZ2l0Ly5nbnVwZw=="
      - equal:
          path: data.privateKey
          value: "Z3BnLWtleS1wbGFjZWhvbGRlcg=="