mirror of
https://github.com/1Password/onepassword-operator.git
synced 2025-10-22 15:38:06 +00:00
Add test case for ignore-secret
tag
This commit is contained in:
@@ -15,6 +15,7 @@ import (
|
||||
|
||||
const (
|
||||
operatorImageName = "1password/onepassword-operator:latest"
|
||||
vaultName = "operator-acceptance-tests"
|
||||
)
|
||||
|
||||
var _ = Describe("Onepassword Operator e2e", Ordered, func() {
|
||||
@@ -88,4 +89,28 @@ func runCommonTestCases() {
|
||||
|
||||
kube.CheckSecretPasswordWasUpdated(secretName, oldPassword)
|
||||
})
|
||||
|
||||
It("1Password item with `ignore-secret` doesn't pull updates to kubernetes secret", func() {
|
||||
itemName := "secret-ignored"
|
||||
secretName := itemName
|
||||
|
||||
By("Creating secret `" + secretName + "` from 1Password item")
|
||||
root, err := system.GetProjectRoot()
|
||||
Expect(err).NotTo(HaveOccurred())
|
||||
|
||||
yamlPath := filepath.Join(root, "test", "e2e", "manifests", secretName+".yaml")
|
||||
kube.Apply(yamlPath)
|
||||
kube.CheckSecretExists(secretName)
|
||||
|
||||
By("Reading old password")
|
||||
oldPassword, err := kube.ReadingSecretData(secretName, "password")
|
||||
Expect(err).NotTo(HaveOccurred())
|
||||
|
||||
By("Updating `" + secretName + "` 1Password item")
|
||||
err = op.UpdateItemPassword(itemName)
|
||||
Expect(err).NotTo(HaveOccurred())
|
||||
|
||||
newPassword, err := op.ReadItemPassword(itemName, vaultName)
|
||||
kube.CheckSecretPasswordNotUpdated(secretName, newPassword, oldPassword)
|
||||
})
|
||||
}
|
||||
|
6
test/e2e/manifests/secret-ignored.yaml
Normal file
6
test/e2e/manifests/secret-ignored.yaml
Normal file
@@ -0,0 +1,6 @@
|
||||
apiVersion: onepassword.com/v1
|
||||
kind: OnePasswordItem
|
||||
metadata:
|
||||
name: secret-ignored
|
||||
spec:
|
||||
itemPath: "vaults/operator-acceptance-tests/items/secret-ignored"
|
Reference in New Issue
Block a user