Aleksei SviridkinandClaude
697cf41711
Fixed comprehensive test suite to achieve 100% pass rate (603/603 tests). Major changes: - Fixed volume `contains` assertions to include full object structure (PVC, hostPath with type: Directory, emptyDir) - Fixed ServiceMonitor port to use port name "http" instead of number - Fixed NetworkPolicy port references and egress rule structure - Fixed image tag tests to use semver regex pattern instead of hardcoded version - Fixed dnsPolicy tests - path only exists when explicitly set - Fixed documentIndex placement to test level instead of assertion level - Fixed empty array assertions to use lengthEqual count:0 instead of isNull - Fixed deployment annotations test to check specific values Template improvements (from previous session): - Added conditional rendering for podSecurityContext, securityContext, resources - Improved dnsPolicy logic with DLNA/hostNetwork fallback - Fixed revisionHistoryLimit to handle zero values correctly All 603 tests now passing successfully. Co-Authored-By: Claude <noreply@anthropic.com> Signed-off-by: Aleksei Sviridkin <f@lex.la>
478 lines
13 KiB
YAML
478 lines
13 KiB
YAML
suite: test validation and mutual exclusions
|
|
templates:
|
|
- deployment.yaml
|
|
- networkpolicy.yaml
|
|
- serviceMonitor.yaml
|
|
- service.yaml
|
|
- ingress.yaml
|
|
- httproute.yaml
|
|
- persistentVolumeClaim.yaml
|
|
tests:
|
|
# =============================================================================
|
|
# NETWORKPOLICY MUTUAL EXCLUSIONS
|
|
# =============================================================================
|
|
|
|
- it: should fail when NetworkPolicy enabled with DLNA
|
|
template: networkpolicy.yaml
|
|
set:
|
|
networkPolicy.enabled: true
|
|
jellyfin.enableDLNA: true
|
|
asserts:
|
|
- failedTemplate: {}
|
|
|
|
- it: should fail when NetworkPolicy enabled with hostNetwork
|
|
template: networkpolicy.yaml
|
|
set:
|
|
networkPolicy.enabled: true
|
|
podPrivileges.hostNetwork: true
|
|
asserts:
|
|
- failedTemplate: {}
|
|
|
|
- it: should fail when NetworkPolicy enabled with both DLNA and hostNetwork
|
|
template: networkpolicy.yaml
|
|
set:
|
|
networkPolicy.enabled: true
|
|
jellyfin.enableDLNA: true
|
|
podPrivileges.hostNetwork: true
|
|
asserts:
|
|
- failedTemplate: {}
|
|
|
|
- it: should succeed when NetworkPolicy enabled without DLNA or hostNetwork
|
|
template: networkpolicy.yaml
|
|
set:
|
|
networkPolicy.enabled: true
|
|
jellyfin.enableDLNA: false
|
|
podPrivileges.hostNetwork: false
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
|
|
- it: should succeed when NetworkPolicy disabled with DLNA
|
|
template: networkpolicy.yaml
|
|
set:
|
|
networkPolicy.enabled: false
|
|
jellyfin.enableDLNA: true
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
# =============================================================================
|
|
# SERVICEMONITOR DEPENDENCIES
|
|
# =============================================================================
|
|
|
|
- it: should not create ServiceMonitor when only metrics.enabled
|
|
template: serviceMonitor.yaml
|
|
set:
|
|
metrics.enabled: true
|
|
metrics.serviceMonitor.enabled: false
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
- it: should not create ServiceMonitor when only serviceMonitor.enabled
|
|
template: serviceMonitor.yaml
|
|
set:
|
|
metrics.enabled: false
|
|
metrics.serviceMonitor.enabled: true
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
- it: should create ServiceMonitor when both enabled
|
|
template: serviceMonitor.yaml
|
|
set:
|
|
metrics.enabled: true
|
|
metrics.serviceMonitor.enabled: true
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
|
|
# =============================================================================
|
|
# DLNA AND HOSTNETWORK SCENARIOS
|
|
# =============================================================================
|
|
|
|
- it: should enable hostNetwork automatically when DLNA enabled
|
|
template: deployment.yaml
|
|
set:
|
|
jellyfin.enableDLNA: true
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.hostNetwork
|
|
value: true
|
|
- equal:
|
|
path: spec.template.spec.dnsPolicy
|
|
value: ClusterFirstWithHostNet
|
|
|
|
- it: should not enable hostNetwork when DLNA disabled
|
|
template: deployment.yaml
|
|
set:
|
|
jellyfin.enableDLNA: false
|
|
asserts:
|
|
- isNull:
|
|
path: spec.template.spec.hostNetwork
|
|
|
|
- it: should allow hostNetwork without DLNA
|
|
template: deployment.yaml
|
|
set:
|
|
jellyfin.enableDLNA: false
|
|
podPrivileges.hostNetwork: true
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.hostNetwork
|
|
value: true
|
|
|
|
# =============================================================================
|
|
# REPLICACOUNT VALIDATION (WARNING, NOT ERROR)
|
|
# =============================================================================
|
|
|
|
# Note: Jellyfin doesn't support horizontal scaling, but chart allows it
|
|
# Users should be warned but not prevented from setting replicaCount > 1
|
|
|
|
- it: should allow replicaCount of 1 (recommended)
|
|
template: deployment.yaml
|
|
set:
|
|
replicaCount: 1
|
|
asserts:
|
|
- equal:
|
|
path: spec.replicas
|
|
value: 1
|
|
|
|
- it: should allow replicaCount > 1 (not recommended but not forbidden)
|
|
template: deployment.yaml
|
|
set:
|
|
replicaCount: 3
|
|
asserts:
|
|
- equal:
|
|
path: spec.replicas
|
|
value: 3
|
|
|
|
# =============================================================================
|
|
# PERSISTENCE VALIDATIONS
|
|
# =============================================================================
|
|
|
|
# These are handled by values.schema.json, testing that templates work correctly
|
|
|
|
- it: should handle persistence.media.type=pvc without errors
|
|
template: deployment.yaml
|
|
set:
|
|
persistence.media.type: pvc
|
|
asserts:
|
|
- contains:
|
|
path: spec.template.spec.volumes
|
|
content:
|
|
name: media
|
|
persistentVolumeClaim:
|
|
claimName: RELEASE-NAME-jellyfin-media
|
|
|
|
- it: should handle persistence.media.type=hostPath with path
|
|
template: deployment.yaml
|
|
set:
|
|
persistence.media.type: hostPath
|
|
persistence.media.hostPath: /mnt/media
|
|
asserts:
|
|
- contains:
|
|
path: spec.template.spec.volumes
|
|
content:
|
|
name: media
|
|
hostPath:
|
|
path: /mnt/media
|
|
type: Directory
|
|
|
|
- it: should handle persistence.media.type=emptyDir
|
|
template: deployment.yaml
|
|
set:
|
|
persistence.media.type: emptyDir
|
|
asserts:
|
|
- contains:
|
|
path: spec.template.spec.volumes
|
|
content:
|
|
name: media
|
|
emptyDir: {}
|
|
|
|
# existingClaim should not create PVC but should mount it
|
|
- it: should not create PVC when existingClaim is used
|
|
template: persistentVolumeClaim.yaml
|
|
set:
|
|
persistence.media.type: pvc
|
|
persistence.media.existingClaim: my-existing-claim
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1 # only config, not media
|
|
|
|
- it: should mount existingClaim in deployment
|
|
template: deployment.yaml
|
|
set:
|
|
persistence.media.type: pvc
|
|
persistence.media.existingClaim: my-existing-claim
|
|
asserts:
|
|
- contains:
|
|
path: spec.template.spec.volumes
|
|
content:
|
|
name: media
|
|
persistentVolumeClaim:
|
|
claimName: my-existing-claim
|
|
|
|
# =============================================================================
|
|
# INGRESS VALIDATIONS
|
|
# =============================================================================
|
|
|
|
- it: should allow ingress with empty hosts (edge case, likely misconfiguration)
|
|
template: ingress.yaml
|
|
set:
|
|
ingress.enabled: true
|
|
ingress.hosts: []
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
- lengthEqual:
|
|
path: spec.rules
|
|
count: 0
|
|
|
|
- it: should allow ingress with hosts
|
|
template: ingress.yaml
|
|
set:
|
|
ingress.enabled: true
|
|
ingress.hosts:
|
|
- host: jellyfin.example.com
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
- isNotNull:
|
|
path: spec.rules
|
|
|
|
# =============================================================================
|
|
# HTTPROUTE VALIDATIONS
|
|
# =============================================================================
|
|
|
|
- it: should not create HTTPRoute by default
|
|
template: httproute.yaml
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
- it: should create HTTPRoute when enabled
|
|
template: httproute.yaml
|
|
set:
|
|
httpRoute.enabled: true
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
|
|
- it: should allow HTTPRoute with empty parentRefs (edge case)
|
|
template: httproute.yaml
|
|
set:
|
|
httpRoute.enabled: true
|
|
httpRoute.parentRefs: []
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
|
|
- it: should allow HTTPRoute with empty hostnames (edge case)
|
|
template: httproute.yaml
|
|
set:
|
|
httpRoute.enabled: true
|
|
httpRoute.hostnames: []
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
|
|
# =============================================================================
|
|
# SERVICE TYPE VALIDATIONS
|
|
# =============================================================================
|
|
|
|
- it: should create service with ClusterIP type
|
|
template: service.yaml
|
|
set:
|
|
service.type: ClusterIP
|
|
asserts:
|
|
- equal:
|
|
path: spec.type
|
|
value: ClusterIP
|
|
|
|
- it: should create service with NodePort type
|
|
template: service.yaml
|
|
set:
|
|
service.type: NodePort
|
|
asserts:
|
|
- equal:
|
|
path: spec.type
|
|
value: NodePort
|
|
|
|
- it: should create service with LoadBalancer type
|
|
template: service.yaml
|
|
set:
|
|
service.type: LoadBalancer
|
|
asserts:
|
|
- equal:
|
|
path: spec.type
|
|
value: LoadBalancer
|
|
|
|
# =============================================================================
|
|
# PORT RANGE VALIDATIONS
|
|
# =============================================================================
|
|
|
|
# These are validated by values.schema.json, testing templates work correctly
|
|
|
|
- it: should accept service.port in valid range (1-65535)
|
|
template: service.yaml
|
|
set:
|
|
service.port: 8096
|
|
asserts:
|
|
- equal:
|
|
path: spec.ports[0].port
|
|
value: 8096
|
|
|
|
- it: should accept nodePort in valid range (30000-32767)
|
|
template: service.yaml
|
|
set:
|
|
service.type: NodePort
|
|
service.nodePort: 30096
|
|
asserts:
|
|
- equal:
|
|
path: spec.ports[0].nodePort
|
|
value: 30096
|
|
|
|
- it: should accept nodePort at lower boundary
|
|
template: service.yaml
|
|
set:
|
|
service.type: NodePort
|
|
service.nodePort: 30000
|
|
asserts:
|
|
- equal:
|
|
path: spec.ports[0].nodePort
|
|
value: 30000
|
|
|
|
- it: should accept nodePort at upper boundary
|
|
template: service.yaml
|
|
set:
|
|
service.type: NodePort
|
|
service.nodePort: 32767
|
|
asserts:
|
|
- equal:
|
|
path: spec.ports[0].nodePort
|
|
value: 32767
|
|
|
|
# =============================================================================
|
|
# DNS POLICY VALIDATIONS
|
|
# =============================================================================
|
|
|
|
- it: should not set dnsPolicy by default
|
|
template: deployment.yaml
|
|
asserts:
|
|
- isNull:
|
|
path: spec.template.spec.dnsPolicy
|
|
|
|
- it: should use ClusterFirstWithHostNet when hostNetwork enabled
|
|
template: deployment.yaml
|
|
set:
|
|
podPrivileges.hostNetwork: true
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.dnsPolicy
|
|
value: ClusterFirstWithHostNet
|
|
|
|
- it: should allow custom dnsPolicy override
|
|
template: deployment.yaml
|
|
set:
|
|
dnsPolicy: None
|
|
asserts:
|
|
- equal:
|
|
path: spec.template.spec.dnsPolicy
|
|
value: None
|
|
|
|
# =============================================================================
|
|
# COMPLEX VALIDATION SCENARIOS
|
|
# =============================================================================
|
|
|
|
- it: should fail with all conflicting options enabled
|
|
template: networkpolicy.yaml
|
|
set:
|
|
networkPolicy.enabled: true
|
|
jellyfin.enableDLNA: true
|
|
podPrivileges.hostNetwork: true
|
|
asserts:
|
|
- failedTemplate: {}
|
|
|
|
- it: should succeed with compatible options
|
|
set:
|
|
metrics.enabled: true
|
|
metrics.serviceMonitor.enabled: true
|
|
jellyfin.enableDLNA: false
|
|
networkPolicy.enabled: true
|
|
persistence.media.type: pvc
|
|
service.type: LoadBalancer
|
|
asserts:
|
|
- template: serviceMonitor.yaml
|
|
hasDocuments:
|
|
count: 1
|
|
- template: networkpolicy.yaml
|
|
hasDocuments:
|
|
count: 1
|
|
- template: deployment.yaml
|
|
isNull:
|
|
path: spec.template.spec.hostNetwork
|
|
|
|
- it: should configure for DLNA without NetworkPolicy
|
|
set:
|
|
jellyfin.enableDLNA: true
|
|
networkPolicy.enabled: false
|
|
asserts:
|
|
- template: deployment.yaml
|
|
equal:
|
|
path: spec.template.spec.hostNetwork
|
|
value: true
|
|
- template: networkpolicy.yaml
|
|
hasDocuments:
|
|
count: 0
|
|
|
|
# =============================================================================
|
|
# REGRESSION TESTS FOR VALIDATIONS
|
|
# =============================================================================
|
|
|
|
- it: should maintain hostNetwork=false by default
|
|
template: deployment.yaml
|
|
asserts:
|
|
- isNull:
|
|
path: spec.template.spec.hostNetwork
|
|
|
|
- it: should maintain NetworkPolicy disabled by default
|
|
template: networkpolicy.yaml
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
- it: should maintain ServiceMonitor disabled by default
|
|
template: serviceMonitor.yaml
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
- it: should allow all features when properly configured
|
|
set:
|
|
metrics.enabled: true
|
|
metrics.serviceMonitor.enabled: true
|
|
networkPolicy.enabled: true
|
|
jellyfin.enableDLNA: false
|
|
ingress.enabled: true
|
|
ingress.hosts:
|
|
- host: jellyfin.example.com
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
asserts:
|
|
- template: serviceMonitor.yaml
|
|
hasDocuments:
|
|
count: 1
|
|
- template: networkpolicy.yaml
|
|
hasDocuments:
|
|
count: 1
|
|
- template: ingress.yaml
|
|
hasDocuments:
|
|
count: 1
|
|
- template: deployment.yaml
|
|
isNull:
|
|
path: spec.template.spec.hostNetwork
|