Initial Commit

unittests/configMaps/grafanaDashboardPostgresExporter.yaml

@@ -0,0 +1,79 @@
+chart:
+  appVersion: 0.1.0
+  version: 0.1.0
+suite: ConfigMap template (Grafana Dashboard PostgresExporter)
+release:
+  name: prometheus-fail2ban-exporter-unittest
+  namespace: testing
+templates:
+- templates/prometheus-fail2ban-exporter/configMapGrafanaDashboardFail2BanExporter.yaml
+tests:
+- it: Rendering fail2banExporter
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Rendering
+  set:
+    grafana.enabled: true
+  asserts:
+  - hasDocuments:
+      count: 1
+  - containsDocument:
+      apiVersion: v1
+      kind: ConfigMap
+      name: prometheus-fail2ban-exporter-unittest-grafana-dashboard-fail2ban-exporter
+      namespace: testing
+  - notExists:
+      path: metadata.annotations
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        grafana_dashboard: "1"
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+  - exists:
+      path: data["fail2banExporter.json"]
+
+- it: Test custom annotations and labels
+  set:
+    grafana.enabled: true
+    grafana.dashboards.fail2banExporter.annotations:
+      foo: bar
+    grafana.dashboards.fail2banExporter.labels:
+      bar: foo
+  asserts:
+  - equal:
+      path: metadata.annotations
+      value:
+        foo: bar
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        grafana_dashboard: "1"
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+        bar: foo
+
+- it: Test custom grafana discovery labels
+  set:
+    grafana.enabled: true
+    grafana.dashboardDiscoveryLabels:
+      grafana_dashboard: null
+      my-custom-discovery-label: my-value
+  asserts:
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        my-custom-discovery-label: my-value
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0

unittests/daemonset/daemonset.yaml

@@ -0,0 +1,377 @@
+chart:
+  appVersion: 0.1.0
+  version: 0.1.0
+suite: DaemonSet template (basic)
+release:
+  name: prometheus-fail2ban-exporter-unittest
+  namespace: testing
+templates:
+- templates/prometheus-fail2ban-exporter/daemonSet.yaml
+tests:
+- it: Rendering default
+  asserts:
+  - hasDocuments:
+      count: 1
+  - containsDocument:
+      apiVersion: apps/v1
+      kind: DaemonSet
+      name: prometheus-fail2ban-exporter-unittest
+      namespace: testing
+  - notExists:
+      path: metadata.annotations
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+  - notExists:
+      path: spec.template.spec.affinity
+  - notExists:
+      path: spec.template.spec.containers[0].envFrom
+  - equal:
+      path: spec.template.spec.containers[0].args
+      value:
+      # - --web.config.file=/etc/prometheus-fail2ban-exporter/config.d/webConfig.yaml
+      - --web.listen-address=:9191
+  - equal:
+      path: spec.template.spec.containers[0].volumeMounts
+      value:
+      - mountPath: /var/run/fail2ban
+        name: socket
+      - mountPath: /etc/prometheus-fail2ban-exporter/config.d
+        name: config-d
+  - equal:
+      path: spec.template.spec.volumes
+      value:
+      - hostPath:
+          path: /var/run/fail2ban
+          type: Directory
+        name: socket
+      - name: config-d
+        secret:
+          secretName: prometheus-fail2ban-exporter-unittest-web-config
+  - equal:
+      path: spec.template.spec.containers[0].image
+      value: git.cryptic.systems/volker.raschek/prometheus-fail2ban-exporter:0.1.0
+  - equal:
+      path: spec.template.spec.containers[0].imagePullPolicy
+      value: IfNotPresent
+  - notExists:
+      path: spec.template.spec.containers[0].resources
+  - notExists:
+      path: spec.template.spec.containers[0].securityContext
+  - notExists:
+      path: spec.template.spec.dnsConfig
+  - notExists:
+      path: spec.template.spec.dnsPolicy
+  - notExists:
+      path: spec.template.spec.hostname
+  - equal:
+      path: spec.template.spec.hostNetwork
+      value: false
+  - notExists:
+      path: spec.template.spec.imagePullSecrets
+  - notExists:
+      path: spec.template.spec.nodeSelector
+  - notExists:
+      path: spec.template.spec.priorityClassName
+  - notExists:
+      path: spec.template.spec.restartPolicy
+  - notExists:
+      path: spec.template.spec.subdomain
+  - equal:
+      path: spec.template.spec.terminationGracePeriodSeconds
+      value: 60
+  - notExists:
+      path: spec.template.spec.tolerations
+  - notExists:
+      path: spec.template.spec.topologySpreadConstraints
+  - equal:
+      path: spec.updateStrategy
+      value:
+        rollingUpdate:
+          maxSurge: 1
+          maxUnavailable: 1
+        type: "RollingUpdate"
+
+- it: Test custom affinity
+  set:
+    daemonSet.affinity:
+      nodeAffinity:
+        requiredDuringSchedulingIgnoredDuringExecution:
+          nodeSelectorTerms:
+          - matchExpressions:
+            - key: topology.kubernetes.io/zone
+              operator: In
+              values:
+              - antarctica-east1
+              - antarctica-west1
+  asserts:
+  - equal:
+      path: spec.template.spec.affinity
+      value:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - key: topology.kubernetes.io/zone
+                operator: In
+                values:
+                - antarctica-east1
+                - antarctica-west1
+
+- it: Test additional arguments
+  set:
+    daemonSet.fail2banExporter.args:
+    - "--foo=bar"
+    - "--bar=foo"
+  asserts:
+  - equal:
+      path: spec.template.spec.containers[0].args
+      value:
+      # - --web.config.file=/etc/prometheus-fail2ban-exporter/config.d/webConfig.yaml
+      - --web.listen-address=:9191
+      - --foo=bar
+      - --bar=foo
+
+- it: Test custom imageRegistry and imageRepository
+  set:
+    daemonSet.fail2banExporter.image.registry: registry.example.local
+    daemonSet.fail2banExporter.image.repository: path/special/prometheus-fail2ban-exporter
+  asserts:
+  - equal:
+      path: spec.template.spec.containers[0].image
+      value: registry.example.local/path/special/prometheus-fail2ban-exporter:0.1.0
+
+- it: Test custom imagePullPolicy
+  set:
+    daemonSet.fail2banExporter.image.pullPolicy: Always
+  asserts:
+  - equal:
+      path: spec.template.spec.containers[0].imagePullPolicy
+      value: Always
+
+- it: Test config.webConfig.existingSecret
+  set:
+    config.webConfig.existingSecret.enabled: true
+    config.webConfig.existingSecret.secretName: web-config-secret
+  asserts:
+  - equal:
+      path: spec.template.spec.containers[0].volumeMounts
+      value:
+      - mountPath: /var/run/fail2ban
+        name: socket
+      - mountPath: /etc/prometheus-fail2ban-exporter/config.d
+        name: config-d
+  - equal:
+      path: spec.template.spec.volumes
+      value:
+      - hostPath:
+          path: /var/run/fail2ban
+          type: Directory
+        name: socket
+      - name: config-d
+        secret:
+          secretName: web-config-secret
+
+- it: Test custom resource limits and requests
+  set:
+    daemonSet.fail2banExporter.resources:
+      limits:
+        cpu: 100m
+        memory: 250MB
+      requests:
+        cpu: 25m
+        memory: 100MB
+  asserts:
+  - equal:
+      path: spec.template.spec.containers[0].env
+      value:
+      - name: GOMAXPROCS
+        valueFrom:
+          resourceFieldRef:
+            divisor: "1"
+            resource: limits.cpu
+  - equal:
+      path: spec.template.spec.containers[0].resources
+      value:
+        limits:
+          cpu: 100m
+          memory: 250MB
+        requests:
+          cpu: 25m
+          memory: 100MB
+
+- it: Test custom securityContext
+  set:
+    daemonSet.fail2banExporter.securityContext:
+      capabilities:
+        add:
+        - NET_RAW
+        drop:
+        - ALL
+      privileged: false
+      readOnlyRootFilesystem: true
+      runAsNonRoot: true
+      runAsUser: 1000
+  asserts:
+  - equal:
+      path: spec.template.spec.containers[0].securityContext
+      value:
+        capabilities:
+          add:
+          - NET_RAW
+          drop:
+          - ALL
+        privileged: false
+        readOnlyRootFilesystem: true
+        runAsNonRoot: true
+        runAsUser: 1000
+
+- it: Test dnsConfig
+  set:
+    daemonSet.dnsConfig:
+      nameservers:
+      - "8.8.8.8"
+      - "8.8.4.4"
+  asserts:
+  - equal:
+      path: spec.template.spec.dnsConfig
+      value:
+        nameservers:
+        - "8.8.8.8"
+        - "8.8.4.4"
+
+- it: Test dnsPolicy
+  set:
+    daemonSet.dnsPolicy: ClusterFirst
+  asserts:
+  - equal:
+      path: spec.template.spec.dnsPolicy
+      value: ClusterFirst
+
+- it: Test hostNetwork, hostname, subdomain
+  set:
+    daemonSet.hostNetwork: true
+    daemonSet.hostname: pg-exporter
+    daemonSet.subdomain: exporters.internal
+  asserts:
+  - equal:
+      path: spec.template.spec.hostNetwork
+      value: true
+  - equal:
+      path: spec.template.spec.hostname
+      value: pg-exporter
+  - equal:
+      path: spec.template.spec.subdomain
+      value: exporters.internal
+
+- it: Test imagePullSecrets
+  set:
+    daemonSet.imagePullSecrets:
+    - name: my-pull-secret
+    - name: my-special-secret
+  asserts:
+  - equal:
+      path: spec.template.spec.imagePullSecrets
+      value:
+      - name: my-pull-secret
+      - name: my-special-secret
+
+- it: Test nodeSelector
+  set:
+    daemonSet.nodeSelector:
+      foo: bar
+  asserts:
+  - equal:
+      path: spec.template.spec.nodeSelector
+      value:
+        foo: bar
+
+- it: Test priorityClassName
+  set:
+    daemonSet.priorityClassName: my-priority
+  asserts:
+  - equal:
+      path: spec.template.spec.priorityClassName
+      value: my-priority
+
+- it: Test restartPolicy
+  set:
+    daemonSet.restartPolicy: Always
+  asserts:
+  - equal:
+      path: spec.template.spec.restartPolicy
+      value: Always
+
+- it: Test terminationGracePeriodSeconds
+  set:
+    daemonSet.terminationGracePeriodSeconds: 120
+  asserts:
+  - equal:
+      path: spec.template.spec.terminationGracePeriodSeconds
+      value: 120
+
+- it: Test tolerations
+  set:
+    daemonSet.tolerations:
+    - key: database/type
+      operator: Equal
+      value: fail2ban
+      effect: NoSchedule
+  asserts:
+  - equal:
+      path: spec.template.spec.tolerations
+      value:
+      - key: database/type
+        operator: Equal
+        value: fail2ban
+        effect: NoSchedule
+
+- it: Test topologySpreadConstraints
+  set:
+    daemonSet.topologySpreadConstraints:
+    - topologyKey: kubernetes.io/hostname
+      whenUnsatisfiable: DoNotSchedule
+      labelSelector:
+        matchLabels:
+          app.kubernetes.io/instance: prometheus-fail2ban-exporter
+  asserts:
+  - equal:
+      path: spec.template.spec.topologySpreadConstraints
+      value:
+      - topologyKey: kubernetes.io/hostname
+        whenUnsatisfiable: DoNotSchedule
+        labelSelector:
+          matchLabels:
+            app.kubernetes.io/instance: prometheus-fail2ban-exporter
+
+- it: Test additional volumeMounts and volumes
+  set:
+    daemonSet.fail2banExporter.volumeMounts:
+    - name: data
+      mountPath: /usr/lib/prometheus-fail2ban-exporter/data
+    daemonSet.volumes:
+    - name: data
+      hostPath:
+        path: /usr/lib/prometheus-fail2ban-exporter/data
+  asserts:
+  - equal:
+      path: spec.template.spec.containers[0].volumeMounts
+      value:
+      - name: data
+        mountPath: /usr/lib/prometheus-fail2ban-exporter/data
+      - name: config-d
+        mountPath: /etc/prometheus-fail2ban-exporter/config.d
+  - equal:
+      path: spec.template.spec.volumes
+      value:
+      - name: data
+        hostPath:
+          path: /usr/lib/prometheus-fail2ban-exporter/data
+      - name: config-d
+        secret:
+          secretName: prometheus-fail2ban-exporter-unittest-web-config

unittests/ingress/ingress.yaml

@@ -0,0 +1,140 @@
+chart:
+  appVersion: 0.1.0
+  version: 0.1.0
+suite: Ingress template (basic)
+release:
+  name: prometheus-fail2ban-exporter-unittest
+  namespace: testing
+templates:
+- templates/prometheus-fail2ban-exporter/ingress.yaml
+tests:
+- it: Skip ingress by default.
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Skip ingress, when service is disabled.
+  set:
+    services.http.enabled: false
+    ingress.enabled: true
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Render ingress with default values.
+  set:
+    ingress.enabled: true
+    ingress.hosts:
+    - host: fail2ban-exporter.example.local
+      paths:
+      - path: /
+        pathType: Prefix
+    ingress.tls:
+    - secretName: fail2ban-exporter-http-tls
+      hosts:
+      - fail2ban-exporter.example.local
+
+  asserts:
+  - hasDocuments:
+      count: 1
+  - containsDocument:
+      apiVersion: networking.k8s.io/v1
+      kind: Ingress
+      name: prometheus-fail2ban-exporter-unittest
+      namespace: testing
+  - notExists:
+      path: metadata.annotations
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+  - equal:
+      path: spec.ingressClassName
+      value: nginx
+  - contains:
+      path: spec.rules
+      content:
+        host: fail2ban-exporter.example.local
+        http:
+          paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: prometheus-fail2ban-exporter-unittest
+                port:
+                  number: 9191
+  - contains:
+      path: spec.tls
+      content:
+        hosts:
+        - fail2ban-exporter.example.local
+        secretName: fail2ban-exporter-http-tls
+
+- it: Render ingress with custom values.
+  set:
+    ingress.enabled: true
+    ingress.annotations:
+      foo: bar
+    ingress.className: nginx
+    ingress.labels:
+      bar: foo
+    ingress.hosts:
+    - host: fail2ban-exporter.example.local
+      paths:
+      - path: /
+        pathType: Prefix
+    ingress.tls:
+    - secretName: fail2ban-exporter-http-tls
+      hosts:
+      - fail2ban-exporter.example.local
+
+    services.http.port: 8080
+
+  asserts:
+  - hasDocuments:
+      count: 1
+  - containsDocument:
+      apiVersion: networking.k8s.io/v1
+      kind: Ingress
+      name: prometheus-fail2ban-exporter-unittest
+      namespace: testing
+  - equal:
+      path: metadata.annotations
+      value:
+        foo: bar
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+        bar: foo
+  - equal:
+      path: spec.ingressClassName
+      value: nginx
+  - contains:
+      path: spec.rules
+      content:
+        host: fail2ban-exporter.example.local
+        http:
+          paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: prometheus-fail2ban-exporter-unittest
+                port:
+                  number: 8080
+  - contains:
+      path: spec.tls
+      content:
+        hosts:
+        - fail2ban-exporter.example.local
+        secretName: fail2ban-exporter-http-tls

unittests/podMonitors/podMonitorHTTP.yaml

@@ -0,0 +1,169 @@
+chart:
+  appVersion: 0.1.0
+  version: 0.1.0
+suite: PodMonitor http template (basic)
+release:
+  name: prometheus-fail2ban-exporter-unittest
+  namespace: testing
+templates:
+- templates/prometheus-fail2ban-exporter/podMonitor.yaml
+tests:
+- it: Skip podMonitor when metrics are disabled.
+  set:
+    prometheus.metrics.enabled: false
+    prometheus.metrics.podMonitor.enabled: true
+    prometheus.metrics.serviceMonitor.enabled: true
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Skip podMonitor when podMonitor is disabled.
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.podMonitor.enabled: false
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Skip podMonitor when both monitor types are enabled.
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.podMonitor.enabled: true
+    prometheus.metrics.serviceMonitor.enabled: true
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Rendering podMonitor with default values - enabled manually.
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.podMonitor.enabled: true
+  asserts:
+  - hasDocuments:
+      count: 1
+  - containsDocument:
+      apiVersion: monitoring.coreos.com/v1
+      kind: PodMonitor
+      name: prometheus-fail2ban-exporter-unittest-http
+      namespace: testing
+  - notExists:
+      path: metadata.annotations
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+  - equal:
+      path: spec.podMetricsEndpoints[0].enableHttp2
+      value: true
+  - equal:
+      path: spec.podMetricsEndpoints[0].followRedirects
+      value: false
+  - equal:
+      path: spec.podMetricsEndpoints[0].honorLabels
+      value: false
+  - equal:
+      path: spec.podMetricsEndpoints[0].interval
+      value: 60s
+  - equal:
+      path: spec.podMetricsEndpoints[0].path
+      value: /metrics
+  - equal:
+      path: spec.podMetricsEndpoints[0].port
+      value: http
+  - notExists:
+      path: spec.podMetricsEndpoints[0].relabelings
+  - equal:
+      path: spec.podMetricsEndpoints[0].scrapeTimeout
+      value: 30s
+  - equal:
+      path: spec.podMetricsEndpoints[0].scheme
+      value: http
+  - contains:
+      path: spec.namespaceSelector.matchNames
+      content:
+        testing
+  - equal:
+      path: spec.selector.matchLabels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+
+- it: Render podMonitor with custom annotations and labels.
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.podMonitor.enabled: true
+    prometheus.metrics.podMonitor.annotations:
+      foo: bar
+    prometheus.metrics.podMonitor.labels:
+      bar: foo
+  asserts:
+  - equal:
+      path: metadata.annotations
+      value:
+        foo: bar
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        bar: foo
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+
+- it: Change defaults
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.podMonitor.enabled: true
+    prometheus.metrics.podMonitor.enableHttp2: false
+    prometheus.metrics.podMonitor.followRedirects: true
+    prometheus.metrics.podMonitor.honorLabels: true
+    prometheus.metrics.podMonitor.interval: "180s"
+    prometheus.metrics.podMonitor.path: "/my-metrics"
+    prometheus.metrics.podMonitor.relabelings:
+    - sourceLabels: [ container ]
+      separator: ";"
+      regex: "app"
+      replacement: "$1"
+      action: "drop"
+    prometheus.metrics.podMonitor.scrapeTimeout: "5s"
+    prometheus.metrics.podMonitor.scheme: "http"
+  asserts:
+  - hasDocuments:
+      count: 1
+  - equal:
+      path: spec.podMetricsEndpoints[0].enableHttp2
+      value: false
+  - equal:
+      path: spec.podMetricsEndpoints[0].followRedirects
+      value: true
+  - equal:
+      path: spec.podMetricsEndpoints[0].honorLabels
+      value: true
+  - equal:
+      path: spec.podMetricsEndpoints[0].interval
+      value: 180s
+  - equal:
+      path: spec.podMetricsEndpoints[0].path
+      value: /my-metrics
+  - equal:
+      path: spec.podMetricsEndpoints[0].port
+      value: http
+  - contains:
+      path: spec.podMetricsEndpoints[0].relabelings
+      content:
+        sourceLabels: [ container ]
+        separator: ";"
+        regex: "app"
+        replacement: "$1"
+        action: "drop"
+  - equal:
+      path: spec.podMetricsEndpoints[0].scrapeTimeout
+      value: 5s
+  - equal:
+      path: spec.podMetricsEndpoints[0].scheme
+      value: http

unittests/secrets/webconfig.yaml

@@ -0,0 +1,74 @@
+chart:
+  appVersion: 0.1.0
+  version: 0.1.0
+suite: Secret database template (basic)
+release:
+  name: prometheus-fail2ban-exporter-unittest
+  namespace: testing
+templates:
+- templates/prometheus-fail2ban-exporter/secretWebConfig.yaml
+tests:
+- it: Rendering default secret.
+  asserts:
+  - hasDocuments:
+      count: 1
+  - containsDocument:
+      apiVersion: v1
+      kind: Secret
+      name: prometheus-fail2ban-exporter-unittest-web-config
+      namespace: testing
+  - notExists:
+      path: metadata.annotations
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+  - equal:
+      path: stringData["webConfig.yaml"]
+      value: |
+        {}
+
+- it: Rendering custom webconfig.
+  set:
+    config.webConfig.secret.webConfig:
+      tls_server_config:
+        cert_file: /path/to/cert.pem
+        client_ca_file: /path/to/ca.pem
+        key_file: /path/to/key.pem
+  asserts:
+  - equal:
+      path: stringData["webConfig.yaml"]
+      value: |
+        tls_server_config:
+          cert_file: /path/to/cert.pem
+          client_ca_file: /path/to/ca.pem
+          key_file: /path/to/key.pem
+
+- it: Rendering custom annotations and labels.
+  set:
+    config.webConfig.secret.annotations:
+      foo: bar
+      bar: foo
+    config.webConfig.secret.labels:
+      foo: bar
+      bar: foo
+    config.webConfig.secret.webConfig:
+      tls_server_config:
+        cert_file: /path/to/cert.pem
+        key_file: /path/to/key.pem
+        client_ca_file: /path/to/ca.pem
+  asserts:
+  - equal:
+      path: metadata.annotations
+      value:
+        foo: bar
+        bar: foo
+  - isSubset:
+      path: metadata.labels
+      content:
+        foo: bar
+        bar: foo

unittests/serviceAccounts/serviceAccount.yaml

@@ -0,0 +1,79 @@
+chart:
+  appVersion: 0.1.0
+  version: 0.1.0
+suite: ServiceAccount prometheus-fail2ban-exporter template (basic)
+release:
+  name: prometheus-fail2ban-exporter-unittest
+  namespace: testing
+templates:
+- templates/prometheus-fail2ban-exporter/serviceAccount.yaml
+tests:
+- it: Skip rendering.
+  set:
+    serviceAccount.existing.enabled: true
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Rendering serviceAccount with default values.
+  asserts:
+  - hasDocuments:
+      count: 1
+  - containsDocument:
+      apiVersion: v1
+      kind: ServiceAccount
+      name: prometheus-fail2ban-exporter-unittest
+      namespace: testing
+  - notExists:
+      path: metadata.annotations
+  - notExists:
+      path: metadata.labels
+  - equal:
+      path: automountServiceAccountToken
+      value: true
+  - notExists:
+      path: imagePullSecrets
+  - notExists:
+      path: secrets
+
+
+- it: Rendering serviceAccount with custom values.
+  set:
+    serviceAccount.new.annotations:
+      foo: bar
+    serviceAccount.new.labels:
+      bar: foo
+    serviceAccount.new.automountServiceAccountToken: false
+    serviceAccount.new.imagePullSecrets:
+    - name: "my-pull-secret"
+    serviceAccount.new.secrets:
+    - name: "my-secret"
+      namespace: "my-namespace"
+      fieldPath: "my-path"
+  asserts:
+  - hasDocuments:
+      count: 1
+  - exists:
+      path: metadata.annotations
+      value:
+        foo: bar
+  - exists:
+      path: metadata.labels
+      value:
+        bar: foo
+  - equal:
+      path: metadata.name
+      value: prometheus-fail2ban-exporter-unittest
+  - equal:
+      path: automountServiceAccountToken
+      value: false
+  - equal:
+      path: imagePullSecrets
+      value:
+        - name: "my-pull-secret"
+  - equal:
+      path: secrets
+      value:
+      - name: "my-secret"
+        namespace: "my-namespace"
+        fieldPath: "my-path"

unittests/serviceMonitors/serviceMonitorHTTP.yaml

@@ -0,0 +1,168 @@
+chart:
+  appVersion: 0.1.0
+  version: 0.1.0
+suite: ServiceMonitor http template (basic)
+release:
+  name: prometheus-fail2ban-exporter-unittest
+  namespace: testing
+templates:
+- templates/prometheus-fail2ban-exporter/serviceMonitorHTTP.yaml
+tests:
+- it: Skip serviceMonitor when service is disabled.
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.serviceMonitor.enabled: true
+    services.http.enabled: false
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Skip serviceMonitor when metrics are disabled.
+  set:
+    prometheus.metrics.enabled: false
+    prometheus.metrics.serviceMonitor.enabled: true
+    services.http.enabled: true
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Skip serviceMonitor when serviceMonitor is disabled.
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.serviceMonitor.enabled: false
+    services.http.enabled: true
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Rendering serviceMonitor with default values - enabled manually.
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.serviceMonitor.enabled: true
+  asserts:
+  - hasDocuments:
+      count: 1
+  - containsDocument:
+      apiVersion: monitoring.coreos.com/v1
+      kind: ServiceMonitor
+      name: prometheus-fail2ban-exporter-unittest-http
+      namespace: testing
+  - notExists:
+      path: metadata.annotations
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+  - equal:
+      path: spec.endpoints[0].enableHttp2
+      value: true
+  - equal:
+      path: spec.endpoints[0].followRedirects
+      value: false
+  - equal:
+      path: spec.endpoints[0].honorLabels
+      value: false
+  - equal:
+      path: spec.endpoints[0].interval
+      value: 60s
+  - equal:
+      path: spec.endpoints[0].path
+      value: /metrics
+  - notExists:
+      path: spec.endpoints[0].relabelings
+  - equal:
+      path: spec.endpoints[0].scrapeTimeout
+      value: 30s
+  - equal:
+      path: spec.endpoints[0].scheme
+      value: http
+  - equal:
+      path: spec.endpoints[0].targetPort
+      value: 9191
+  - contains:
+      path: spec.namespaceSelector.matchNames
+      content:
+        testing
+  - equal:
+      path: spec.selector.matchLabels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/service-name: http
+
+- it: Render serviceMonitor with custom annotations and labels.
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.serviceMonitor.enabled: true
+    prometheus.metrics.serviceMonitor.annotations:
+      foo: bar
+    prometheus.metrics.serviceMonitor.labels:
+      bar: foo
+  asserts:
+  - equal:
+      path: metadata.annotations
+      value:
+        foo: bar
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/version: 0.1.0
+        bar: foo
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+
+- it: Change defaults
+  set:
+    prometheus.metrics.enabled: true
+    prometheus.metrics.serviceMonitor.enabled: true
+    prometheus.metrics.serviceMonitor.enableHttp2: false
+    prometheus.metrics.serviceMonitor.followRedirects: true
+    prometheus.metrics.serviceMonitor.honorLabels: true
+    prometheus.metrics.serviceMonitor.interval: "180s"
+    prometheus.metrics.serviceMonitor.path: "/my-metrics"
+    prometheus.metrics.serviceMonitor.relabelings:
+    - sourceLabels: [ container ]
+      separator: ";"
+      regex: "app"
+      replacement: "$1"
+      action: "drop"
+    prometheus.metrics.serviceMonitor.scrapeTimeout: "5s"
+    prometheus.metrics.serviceMonitor.scheme: "http"
+  asserts:
+  - hasDocuments:
+      count: 1
+  - equal:
+      path: spec.endpoints[0].enableHttp2
+      value: false
+  - equal:
+      path: spec.endpoints[0].followRedirects
+      value: true
+  - equal:
+      path: spec.endpoints[0].honorLabels
+      value: true
+  - equal:
+      path: spec.endpoints[0].interval
+      value: 180s
+  - equal:
+      path: spec.endpoints[0].path
+      value: /my-metrics
+  - contains:
+      path: spec.endpoints[0].relabelings
+      content:
+        sourceLabels: [ container ]
+        separator: ";"
+        regex: "app"
+        replacement: "$1"
+        action: "drop"
+  - equal:
+      path: spec.endpoints[0].scrapeTimeout
+      value: 5s
+  - equal:
+      path: spec.endpoints[0].scheme
+      value: http

unittests/services/http.yaml

@@ -0,0 +1,174 @@
+chart:
+  appVersion: 0.1.0
+  version: 0.1.0
+suite: Service http template (basic)
+release:
+  name: prometheus-fail2ban-exporter-unittest
+  namespace: testing
+templates:
+- templates/prometheus-fail2ban-exporter/serviceHTTP.yaml
+tests:
+- it: Skip service when disabled.
+  set:
+    services.http.enabled: false
+  asserts:
+  - hasDocuments:
+      count: 0
+
+- it: Rendering service with default values.
+  asserts:
+  - hasDocuments:
+      count: 1
+  - containsDocument:
+      apiVersion: v1
+      kind: Service
+      name: prometheus-fail2ban-exporter-unittest-http
+      namespace: testing
+  - notExists:
+      path: metadata.annotations
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/service-name: http
+        app.kubernetes.io/version: 0.1.0
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+  - notExists:
+      path: spec.externalIPs
+  - notExists:
+      path: spec.externalTrafficPolicy
+  - equal:
+      path: spec.internalTrafficPolicy
+      value: Cluster
+  - notExists:
+      path: spec.ipFamilies
+  - notExists:
+      path: spec.loadBalancerClass
+  - notExists:
+      path: spec.loadBalancerIP
+  - notExists:
+      path: spec.loadBalancerSourceRanges
+  - equal:
+      path: spec.ports[0].name
+      value: http
+  - equal:
+      path: spec.ports[0].protocol
+      value: TCP
+  - equal:
+      path: spec.ports[0].port
+      value: 9191
+  - equal:
+      path: spec.selector
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+  - equal:
+      path: spec.sessionAffinity
+      value: None
+  - notExists:
+      path: spec.sessionAffinityConfig
+  - equal:
+      path: spec.type
+      value: ClusterIP
+
+- it: Require internalTrafficPolicy.
+  set:
+    services.http.internalTrafficPolicy: ""
+  asserts:
+  - failedTemplate:
+    errorMessage: No internal traffic policy defined!
+
+- it: Require port.
+  set:
+    services.http.port: ""
+  asserts:
+  - failedTemplate:
+    errorMessage: No service port defined!
+
+- it: Require sessionAffinity.
+  set:
+    services.http.sessionAffinity: ""
+  asserts:
+  - failedTemplate:
+    errorMessage: No session affinity defined!
+
+- it: Require service type.
+  set:
+    services.http.type: ""
+  asserts:
+  - failedTemplate:
+    errorMessage: No service type defined!
+
+- it: Render service with custom annotations and labels.
+  set:
+    services.http.annotations:
+      foo: bar
+    services.http.labels:
+      bar: foo
+  asserts:
+  - equal:
+      path: metadata.annotations
+      value:
+        foo: bar
+  - equal:
+      path: metadata.labels
+      value:
+        app.kubernetes.io/instance: prometheus-fail2ban-exporter-unittest
+        app.kubernetes.io/managed-by: Helm
+        app.kubernetes.io/name: prometheus-fail2ban-exporter
+        app.kubernetes.io/service-name: http
+        app.kubernetes.io/version: 0.1.0
+        helm.sh/chart: prometheus-fail2ban-exporter-0.1.0
+        bar: foo
+
+- it: Change defaults
+  set:
+    services.http.externalIPs:
+    - "10.11.12.13/32"
+    services.http.externalTrafficPolicy: Local
+    services.http.internalTrafficPolicy: Local
+    services.http.ipFamilies:
+    - IPv4
+    services.http.loadBalancerClass: aws
+    services.http.loadBalancerIP: "11.12.13.14"
+    services.http.loadBalancerSourceRanges:
+    - "11.12.0.0/17"
+    services.http.port: 10443
+    services.http.sessionAffinity: ClientIP
+    services.http.type: LoadBalancer
+  asserts:
+  - equal:
+      path: spec.externalIPs
+      value:
+      - 10.11.12.13/32
+  - equal:
+      path: spec.externalTrafficPolicy
+      value: Local
+  - equal:
+      path: spec.internalTrafficPolicy
+      value: Local
+  - equal:
+      path: spec.ipFamilies
+      value:
+      - IPv4
+  - equal:
+      path: spec.loadBalancerClass
+      value: aws
+  - equal:
+      path: spec.loadBalancerIP
+      value: "11.12.13.14"
+  - equal:
+      path: spec.loadBalancerSourceRanges
+      value:
+      - "11.12.0.0/17"
+  - equal:
+      path: spec.ports[0].port
+      value: 10443
+  - equal:
+      path: spec.sessionAffinity
+      value: ClientIP
+  - equal:
+      path: spec.type
+      value: LoadBalancer