suite: "Test GitHub Secret Labels" templates: - githubsecret.yaml tests: - it: should render base labels set: scaleset.name: "test" auth.url: "https://github.com/org" auth.githubToken: "gh_token12345" release: name: "test-name" namespace: "test-namespace" chart: appVersion: "0.14.0" asserts: - equal: path: metadata.labels["helm.sh/chart"] value: "gha-rs-0.14.0" - equal: path: metadata.labels["app.kubernetes.io/name"] value: "test-name" - equal: path: metadata.labels["app.kubernetes.io/instance"] value: "test-name" - equal: path: metadata.labels["app.kubernetes.io/component"] value: "github-secret" - equal: path: metadata.labels["app.kubernetes.io/managed-by"] value: "Helm" - equal: path: metadata.labels["app.kubernetes.io/part-of"] value: "gha-rs" - equal: path: metadata.labels["app.kubernetes.io/version"] value: "0.14.0" - equal: path: metadata.labels["actions.github.com/scale-set-name"] value: "test-name" - equal: path: metadata.labels["actions.github.com/scale-set-namespace"] value: "test-namespace" - it: should include global labels set: scaleset.name: "test" auth.url: "https://github.com/org" auth.githubToken: "gh_token12345" resource: all: metadata: labels: global-team: "platform" owner: "devops" release: name: "test-name" namespace: "test-namespace" asserts: - equal: path: metadata.labels["global-team"] value: "platform" - equal: path: metadata.labels["owner"] value: "devops" - equal: path: metadata.labels["app.kubernetes.io/component"] value: "github-secret" - it: should drop actions.github.com custom labels from global config set: scaleset.name: "test" auth.url: "https://github.com/org" auth.githubToken: "gh_token12345" resource: all: metadata: labels: owner: "devops" actions.github.com/global-custom: "global-value" release: name: "test-name" namespace: "test-namespace" asserts: - equal: path: metadata.labels["owner"] value: "devops" - notExists: path: metadata.labels["actions.github.com/global-custom"] - equal: path: metadata.labels["actions.github.com/scale-set-name"] value: "test-name" - it: should not allow global labels to override reserved labels set: scaleset.name: "test" auth.url: "https://github.com/org" auth.githubToken: "gh_token12345" resource: all: metadata: labels: helm.sh/chart: "bad" app.kubernetes.io/name: "bad" app.kubernetes.io/instance: "bad" app.kubernetes.io/component: "bad" actions.github.com/scale-set-name: "bad" actions.github.com/scale-set-namespace: "bad" release: name: "test-name" namespace: "test-namespace" asserts: - equal: path: metadata.labels["helm.sh/chart"] value: "gha-rs-0.14.0" - equal: path: metadata.labels["app.kubernetes.io/name"] value: "test-name" - equal: path: metadata.labels["app.kubernetes.io/instance"] value: "test-name" - equal: path: metadata.labels["app.kubernetes.io/component"] value: "github-secret" - equal: path: metadata.labels["actions.github.com/scale-set-name"] value: "test-name" - equal: path: metadata.labels["actions.github.com/scale-set-namespace"] value: "test-namespace"