TheArchive/tailscale
1
0
Fork 0
mirror of https://github.com/tailscale/tailscale.git synced 2025-05-09 17:16:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

cmd/k8s-operator: add unit test for custom service account

Browse Source 
Updates #15875

Signed-off-by: Lee Briggs <lee@leebriggs.co.uk>
This commit is contained in:
Lee Briggs 2025-05-05 12:09:47 -07:00
parent 52e640ee07
commit bd99a3601b
No known key found for this signature in database
GPG Key ID: A4D09B96FDFEB505
1 changed files with 37 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
cmd/k8s-operator/tsrecorder_test.go
View File

@ -52,6 +52,43 @@ func TestRecorder(t *testing.T) {
clock: cl,
}
t.Run("custom service account name is used if specified", func(t *testing.T) {
updated := tsr.DeepCopy()
updated.Spec.EnableUI = true
updated.Spec.StatefulSet.Pod.ServiceAccountName = "my-custom-sa"
mustUpdate(t, fc, "", updated.Name, func(r *tsapi.Recorder) {
r.Spec = updated.Spec
})
expectReconciled(t, reconciler, "", updated.Name)
rb := &rbacv1.RoleBinding{}
if err := fc.Get(context.Background(), client.ObjectKey{
Namespace: tsNamespace,
Name: updated.Name,
}, rb); err != nil {
t.Fatal(err)
}
if got, want := rb.Subjects[0].Name, "my-custom-sa"; got != want {
t.Errorf("RoleBinding subject name = %q; want %q", got, want)
}
ss := &appsv1.StatefulSet{}
if err := fc.Get(context.Background(), client.ObjectKey{
Namespace: tsNamespace,
Name: updated.Name,
}, ss); err != nil {
t.Fatal(err)
}
if got, want := ss.Spec.Template.Spec.ServiceAccountName, "my-custom-sa"; got != want {
t.Errorf("StatefulSet Pod spec SA = %q; want %q", got, want)
}
expectMissing[corev1.ServiceAccount](t, fc, tsNamespace, updated.Name)
})
t.Run("invalid spec gives an error condition", func(t *testing.T) {
expectReconciled(t, reconciler, "", tsr.Name)