suite: Deployment

templates:
  - deployment.yaml

tests:
  - it: sets readOnlyRootFilesystem in container securityContext when reloader.readOnlyRootFileSystem is true
    set:
      reloader:
        readOnlyRootFileSystem: true
        deployment:
          containerSecurityContext:
            readOnlyRootFilesystem: false
    asserts:
      - equal:
          path: spec.template.spec.containers[0].securityContext.readOnlyRootFilesystem
          value: true

  - it: sets readOnlyRootFilesystem in container securityContext even if reloader.deployment.containerSecurityContext is null
    set:
      reloader:
        readOnlyRootFileSystem: true
        deployment:
          containerSecurityContext: null
    asserts:
      - equal:
          path: spec.template.spec.containers[0].securityContext.readOnlyRootFilesystem
          value: true

  - it: does not override readOnlyRootFilesystem in container securityContext based on reloader.readOnlyRootFileSystem
    set:
      reloader:
        readOnlyRootFileSystem: false
        deployment:
          containerSecurityContext:
            readOnlyRootFilesystem: true
    asserts:
      - equal:
          path: spec.template.spec.containers[0].securityContext.readOnlyRootFilesystem
          value: true

  - it: template is still valid with no defined containerSecurityContext
    set:
      reloader:
        readOnlyRootFileSystem: false
        deployment:
          containerSecurityContext: null
    asserts:
      - isEmpty:
          path: spec.template.spec.containers[0].securityContext

  - it: template still sets POD_NAME and POD_NAMESPACE environment variables when enableHA is true
    set:
      reloader:
        enableHA: true
    asserts:
      - contains:
          path: spec.template.spec.containers[0].env
          content:
            name: POD_NAME
            valueFrom:
              fieldRef:
                fieldPath: metadata.name

  - it: sets ignored-workload-types argument when ignoreJobs is true
    set:
      reloader:
        ignoreJobs: true
    asserts:
      - contains:
          path: spec.template.spec.containers[0].args
          content: "--ignored-workload-types=jobs"

  - it: sets ignored-workload-types argument when ignoreCronJobs is true
    set:
      reloader:
        ignoreCronJobs: true
    asserts:
      - contains:
          path: spec.template.spec.containers[0].args
          content: "--ignored-workload-types=cronjobs"

  - it: sets ignored-workload-types argument when both ignoreJobs and ignoreCronJobs are true
    set:
      reloader:
        ignoreJobs: true
        ignoreCronJobs: true
    asserts:
      - contains:
          path: spec.template.spec.containers[0].args
          content: "--ignored-workload-types=jobs,cronjobs"

  - it: does not set ignored-workload-types argument when both ignoreJobs and ignoreCronJobs are false
    set:
      reloader:
        ignoreJobs: false
        ignoreCronJobs: false
    asserts:
      - notContains:
          path: spec.template.spec.containers[0].args
          content: "--ignored-workload-types=jobs"
      - notContains:
          path: spec.template.spec.containers[0].args
          content: "--ignored-workload-types=cronjobs"