add unit tests

sysdiglabs · Dec 18, 2024 · a24b752 · a24b752
1 parent d1fde1f
commit a24b752
Show file tree

Hide file tree

Showing 2 changed files with 30 additions and 0 deletions.
diff --git a/charts/shield/tests/cluster/openshift-securitycontextconstraint_test.yaml b/charts/shield/tests/cluster/openshift-securitycontextconstraint_test.yaml
@@ -26,3 +26,18 @@ tests:
       - contains:
           path: users
           content: "system:serviceaccount:shield-namespace:release-name-shield-cluster"
+
+  - it: Creates SecurityContextConstraints when the extraCapability has been set
+    set:
+      extra_capabilities_api_versions:
+        - security.openshift.io/v1
+    asserts:
+      - hasDocuments:
+          count: 1
+      - containsDocument:
+          kind: SecurityContextConstraints
+          apiVersion: security.openshift.io/v1
+          name: release-name-shield-cluster
+      - contains:
+          path: users
+          content: "system:serviceaccount:shield-namespace:release-name-shield-cluster"
diff --git a/charts/shield/tests/host/openshift-securitycontextconstraint_test.yaml b/charts/shield/tests/host/openshift-securitycontextconstraint_test.yaml
@@ -27,6 +27,21 @@ tests:
           path: users
           content: "system:serviceaccount:shield-namespace:release-name-shield-host"
 
+  - it: Creates SecurityContextConstraints when the extraCapability has been set
+    set:
+      extra_capabilities_api_versions:
+        - security.openshift.io/v1
+    asserts:
+      - hasDocuments:
+          count: 1
+      - containsDocument:
+          kind: SecurityContextConstraints
+          apiVersion: security.openshift.io/v1
+          name: release-name-shield-host
+      - contains:
+          path: users
+          content: "system:serviceaccount:shield-namespace:release-name-shield-host"
+
   - it: SecurityContextConstraints allowedCapabilities is empty when host.privileged is true
     capabilities:
       apiVersions: