volker.raschekandCopilot
4884dc0fe0
The files in templates/gitea/ used a mix of naming styles: lowercase concatenations (poddisruptionbudget.yaml, serviceaccount.yaml, servicemonitor.yaml, pvc.yaml), camelCase (httpService.yaml, sshService.yaml) and kind-suffixed names (gpg-secret.yaml, metrics-secret.yaml). It was therefore not obvious from a file name which Kubernetes resource it renders, and the naming contradicted the camelCase convention the Gateway API templates already follow. Files are now named after the kind they render, with a lowercase suffix distinguishing several resources of the same kind: config.yaml -> secret_config.yaml + secret_inlineConfig.yaml gpg-secret.yaml -> secret_gpg.yaml init.yaml -> secret_init.yaml metrics-secret.yaml -> secret_metrics.yaml httpService.yaml -> service_http.yaml sshService.yaml -> service_ssh.yaml poddisruptionbudget.yaml -> podDisruptionBudget.yaml pvc.yaml -> persistentVolumeClaim.yaml serviceaccount.yaml -> serviceAccount.yaml servicemonitor.yaml -> serviceMonitor.yaml config.yaml rendered two Secrets from a single file, which forced every unit test to address them via documentIndex. It is split so that each file renders exactly one resource. The rendered manifests are unchanged; only file names and the references to them were touched. This includes the checksum/config annotation in deployment.yaml and all helm unit test suites. The HA guard assertions had to move from deployment.yaml to secret_config.yaml: Helm sorts templates in reverse alphabetical order, so secret_config.yaml is now rendered before deployment.yaml and the fail() is reported for that file directly instead of bubbling up through the include chain of the Deployment. Users relying on the template paths (e.g. `helm template --show-only` or post-renderers) have to adjust to the new file names. Co-authored-by: Copilot <copilot@github.com>
139 lines
4.9 KiB
YAML
139 lines
4.9 KiB
YAML
suite: Dependency checks | Customization integrity | postgresql-ha
|
|
release:
|
|
name: gitea-unittests
|
|
namespace: testing
|
|
set:
|
|
postgresql:
|
|
enabled: false
|
|
postgresql-ha:
|
|
enabled: true
|
|
global:
|
|
postgresql:
|
|
database: gitea-database
|
|
password: gitea-password
|
|
username: gitea-username
|
|
postgresql:
|
|
repmgrPassword: custom-password-repmgr
|
|
postgresPassword: custom-password-postgres
|
|
password: custom-password-overwritten-by-global-postgresql-password
|
|
pgpool:
|
|
adminPassword: custom-password-pgpool
|
|
srCheckPassword: custom-password-sr-check
|
|
service:
|
|
ports:
|
|
postgresql: 1234
|
|
persistence:
|
|
size: 1337Mi
|
|
tests:
|
|
- it: "[postgresql-ha] DB settings are applied as expected"
|
|
template: charts/postgresql-ha/templates/postgresql/statefulset.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
contains:
|
|
path: spec.template.spec.containers[0].env
|
|
content:
|
|
name: POSTGRES_DB
|
|
value: "gitea-database"
|
|
- documentIndex: 0
|
|
contains:
|
|
path: spec.template.spec.containers[0].env
|
|
content:
|
|
name: POSTGRES_USER
|
|
value: "gitea-username"
|
|
- it: "[postgresql-ha] DB passwords are applied as expected"
|
|
template: charts/postgresql-ha/templates/postgresql/secrets.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
equal:
|
|
path: data["repmgr-password"]
|
|
value: "Y3VzdG9tLXBhc3N3b3JkLXJlcG1ncg=="
|
|
- documentIndex: 0
|
|
equal:
|
|
path: data["postgres-password"]
|
|
value: "Y3VzdG9tLXBhc3N3b3JkLXBvc3RncmVz"
|
|
- documentIndex: 0
|
|
equal:
|
|
path: data["password"]
|
|
value: "Z2l0ZWEtcGFzc3dvcmQ=" # postgresql-ha.postgresql.password is overwritten by postgresql-ha.global.postgresql.password and should not be referenced here
|
|
- it: "[postgresql-ha] pgpool.adminPassword is applied as expected"
|
|
template: charts/postgresql-ha/templates/pgpool/secrets.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
equal:
|
|
path: data["admin-password"]
|
|
value: "Y3VzdG9tLXBhc3N3b3JkLXBncG9vbA=="
|
|
- it: "[postgresql-ha] pgpool.adminPassword is applied as expected"
|
|
template: charts/postgresql-ha/templates/pgpool/secrets.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
equal:
|
|
path: data["admin-password"]
|
|
value: "Y3VzdG9tLXBhc3N3b3JkLXBncG9vbA=="
|
|
- it: "[postgresql-ha] pgpool.adminPassword is applied as expected"
|
|
template: charts/postgresql-ha/templates/pgpool/secrets.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
equal:
|
|
path: data["admin-password"]
|
|
value: "Y3VzdG9tLXBhc3N3b3JkLXBncG9vbA=="
|
|
- it: "[postgresql-ha] pgpool.srCheckPassword is applied as expected"
|
|
template: charts/postgresql-ha/templates/pgpool/secrets.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
equal:
|
|
path: data["sr-check-password"]
|
|
value: "Y3VzdG9tLXBhc3N3b3JkLXNyLWNoZWNr"
|
|
- it: "[postgresql-ha] persistence.size is applied as expected"
|
|
template: charts/postgresql-ha/templates/postgresql/statefulset.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
equal:
|
|
path: spec.volumeClaimTemplates[0].spec.resources.requests.storage
|
|
value: "1337Mi"
|
|
- it: "[postgresql-ha] service.ports.postgresql is applied as expected"
|
|
template: charts/postgresql-ha/templates/pgpool/service.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
equal:
|
|
path: spec.ports[0].port
|
|
value: 1234
|
|
- it: "[postgresql-ha] renders the referenced service"
|
|
template: charts/postgresql-ha/templates/pgpool/service.yaml
|
|
asserts:
|
|
- containsDocument:
|
|
kind: Service
|
|
apiVersion: v1
|
|
name: gitea-unittests-postgresql-ha-pgpool
|
|
namespace: testing
|
|
- it: "[gitea] connects to pgpool service"
|
|
template: templates/gitea/secret_inlineConfig.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
matchRegex:
|
|
path: stringData.database
|
|
pattern: HOST=gitea-unittests-postgresql-ha-pgpool.testing.svc.cluster.local:1234
|
|
- it: "[gitea] connects to pgpool service with custom cluster domain"
|
|
set:
|
|
clusterDomain: my-special-cluster.local
|
|
template: templates/gitea/secret_inlineConfig.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
matchRegex:
|
|
path: stringData.database
|
|
pattern: HOST=gitea-unittests-postgresql-ha-pgpool.testing.svc.my-special-cluster.local:1234
|
|
- it: "[gitea] connects to configured database"
|
|
template: templates/gitea/secret_inlineConfig.yaml
|
|
asserts:
|
|
- documentIndex: 0
|
|
matchRegex:
|
|
path: stringData.database
|
|
pattern: NAME=gitea-database
|
|
- documentIndex: 0
|
|
matchRegex:
|
|
path: stringData.database
|
|
pattern: USER=gitea-username
|
|
- documentIndex: 0
|
|
matchRegex:
|
|
path: stringData.database
|
|
pattern: PASSWD=gitea-password
|