
Reviewed-on: https://code.forgejo.org/forgejo-helm/forgejo-helm/pulls/953 Reviewed-by: Michael Kriese <michael.kriese@gmx.de> Co-authored-by: Lucien Weller <lucien@wellernet.ch> Co-committed-by: Lucien Weller <lucien@wellernet.ch>
25 lines
886 B
YAML
25 lines
886 B
YAML
# $schema: https://raw.githubusercontent.com/helm-unittest/helm-unittest/main/schema/helm-testsuite.json
|
|
suite: deployment template (security context)
|
|
release:
|
|
name: gitea-unittests
|
|
namespace: testing
|
|
templates:
|
|
- templates/gitea/deployment.yaml
|
|
- templates/gitea/config.yaml
|
|
tests:
|
|
- it: FS group not set
|
|
template: templates/gitea/deployment.yaml
|
|
set:
|
|
image.rootless: false
|
|
global.compatibility.openshift.adaptSecurityContext: force
|
|
asserts:
|
|
- notExists:
|
|
path: spec.template.spec.securityContext.fsGroup
|
|
- it: configure-gitea without runaAsUser
|
|
template: templates/gitea/deployment.yaml
|
|
set:
|
|
image.rootless: false
|
|
global.compatibility.openshift.adaptSecurityContext: force
|
|
asserts:
|
|
- notExists:
|
|
path: spec.template.spec.initContainers[?(@.name == 'configure-gitea')].securityContext.runAsUser
|