helm-charts/charts/library/common/test-chart/unittests/container/field_securityContext_test.yaml

---
# yaml-language-server: $schema=https://raw.githubusercontent.com/helm-unittest/helm-unittest/main/schema/helm-testsuite.json
suite: container - fields - securityContext
templates:
  - common.yaml
values:
  - ../_values/controllers_main_default_container.yaml
tests:
  - it: default should pass
    documentSelector:
      path: $[?(@.kind == "Deployment")].metadata.name
      value: release-name
    asserts:
      - notExists:
          path: spec.template.spec.containers[0].securityContext

  - it: defaultContainerOption should pass
    set:
      controllers:
        main:
          defaultContainerOptions:
            securityContext:
              runAsUser: 1000
              runAsGroup: 1000
    documentSelector:
      path: $[?(@.kind == "Deployment")].metadata.name
      value: release-name
    asserts:
      - equal:
          path: spec.template.spec.containers[0].securityContext
          value:
            runAsUser: 1000
            runAsGroup: 1000

  - it: defaultContainerOption with container override should pass
    set:
      controllers:
        main:
          defaultContainerOptions:
            securityContext:
              runAsUser: 1000
              runAsGroup: 1000
          containers:
            main:
              securityContext:
                runAsUser: 568
                runAsGroup: 568
    documentSelector:
      path: $[?(@.kind == "Deployment")].metadata.name
      value: release-name
    asserts:
      - equal:
          path: spec.template.spec.containers[0].securityContext
          value:
            runAsUser: 568
            runAsGroup: 568