Add tests for standalone flagd deployment

Signed-off-by: Yosiah de Koeyer <dev@yosiahdekoeyer.dev>

Author: Y0sh1dk

internal/common/flagdinjector/flagdinjector_test.go

@@ -711,6 +711,145 @@ func TestFlagdContainerInjector_InjectUnknownSyncProvider(t *testing.T) {
 	require.ErrorIs(t, err, common.ErrUnrecognizedSyncProvider)
 }
 
+func TestFlagdContainerInjector_InjectDefaultSyncProvider_Standalone(t *testing.T) {
+	namespace, fakeClient := initContainerInjectionTestEnv()
+
+	fi := &FlagdContainerInjector{
+		Client:                    fakeClient,
+		Logger:                    testr.New(t),
+		FlagdProxyConfig:          getProxyConfig(),
+		FlagdResourceRequirements: getResourceRequirements(),
+		Image:                     testImage,
+		Tag:                       testTag,
+	}
+
+	pod := generatePod(nil, nil, nil, namespace)
+
+	flagSourceConfig := getFlagSourceConfigSpec()
+
+	flagSourceConfig.DefaultSyncProvider = apicommon.SyncProviderGrpc
+
+	flagSourceConfig.Sources = []api.Source{{}}
+
+	err := fi.InjectFlagd(context.Background(), &pod.ObjectMeta, &pod.Spec, flagSourceConfig)
+	require.Nil(t, err)
+
+	expectedPod := getExpectedStandalonePod(namespace)
+
+	expectedPod.Spec.Containers[0].Args = []string{"start", "--management-port", "8014", "--port", "8013", "--sources", "[{\"uri\":\"\",\"provider\":\"grpc\"}]"}
+
+	require.Equal(t, expectedPod, pod)
+}
+
+func TestFlagdContainerInjector_InjectFlagdKubernetesSource_Standalone(t *testing.T) {
+	namespace, fakeClient := initContainerInjectionTestEnv()
+
+	fi := &FlagdContainerInjector{
+		Client:                    fakeClient,
+		Logger:                    testr.New(t),
+		FlagdProxyConfig:          getProxyConfig(),
+		FlagdResourceRequirements: getResourceRequirements(),
+		Image:                     testImage,
+		Tag:                       testTag,
+	}
+
+	pod := generatePod(nil, nil, nil, namespace)
+
+	flagSourceConfig := getFlagSourceConfigSpec()
+
+	flagSourceConfig.Sources = []api.Source{
+		{
+			Source:   "my-namespace/server-side",
+			Provider: apicommon.SyncProviderKubernetes,
+		},
+	}
+
+	err := fi.InjectFlagd(context.Background(), &pod.ObjectMeta, &pod.Spec, flagSourceConfig)
+
+	require.Nil(t, err)
+
+	expectedPod := getExpectedStandalonePod(namespace)
+
+	expectedPod.Annotations = map[string]string{
+		"openfeature.dev/allowkubernetessync": "true",
+	}
+	expectedPod.Spec.Containers[0].Args = []string{"start", "--management-port", "8014", "--port", "8013", "--sources", "[{\"uri\":\"my-namespace/server-side\",\"provider\":\"kubernetes\"}]"}
+
+	require.Equal(t, expectedPod, pod)
+
+	// verify the update of the ClusterRoleBinding
+	cbr := &rbacv1.ClusterRoleBinding{}
+	err = fakeClient.Get(context.Background(), client.ObjectKey{Name: common.ClusterRoleBindingName}, cbr)
+
+	require.Nil(t, err)
+
+	require.Len(t, cbr.Subjects, 1)
+	require.Equal(t, rbacv1.Subject{
+		Kind:      "ServiceAccount",
+		Name:      "default",
+		Namespace: namespace,
+	}, cbr.Subjects[0])
+}
+
+func TestFlagdContainerInjector_InjectFlagdFilePathSource_Standalone(t *testing.T) {
+	namespace, fakeClient := initContainerInjectionTestEnv()
+
+	fi := &FlagdContainerInjector{
+		Client:                    fakeClient,
+		Logger:                    testr.New(t),
+		FlagdProxyConfig:          getProxyConfig(),
+		FlagdResourceRequirements: getResourceRequirements(),
+		Image:                     testImage,
+		Tag:                       testTag,
+	}
+
+	pod := generatePod(nil, nil, nil, namespace)
+
+	flagSourceConfig := getFlagSourceConfigSpec()
+
+	flagSourceConfig.Sources = []api.Source{
+		{
+			Source:   "my-namespace/server-side",
+			Provider: apicommon.SyncProviderFilepath,
+		},
+	}
+
+	err := fi.InjectFlagd(context.Background(), &pod.ObjectMeta, &pod.Spec, flagSourceConfig)
+
+	require.Nil(t, err)
+
+	expectedPod := getExpectedStandalonePod(namespace)
+
+	expectedPod.Spec.Volumes = []v1.Volume{
+		{
+			Name: "server-side",
+			VolumeSource: v1.VolumeSource{
+				ConfigMap: &v1.ConfigMapVolumeSource{
+					LocalObjectReference: v1.LocalObjectReference{
+						Name: "server-side",
+					},
+				},
+			},
+		},
+	}
+
+	expectedPod.Spec.Containers[0].Args = []string{"start", "--management-port", "8014", "--port", "8013", "--sources", "[{\"uri\":\"/etc/flagd/my-namespace_server-side/my-namespace_server-side.flagd.json\",\"provider\":\"file\"}]"}
+	expectedPod.Spec.Containers[0].VolumeMounts = []v1.VolumeMount{
+		{
+			Name:      "server-side",
+			ReadOnly:  false,
+			MountPath: "/etc/flagd/my-namespace_server-side",
+		},
+	}
+
+	require.Equal(t, expectedPod, pod)
+
+	// verify the creation of the referenced ConfigMap
+	cm := &v1.ConfigMap{}
+	err = fakeClient.Get(context.TODO(), client.ObjectKey{Name: pod.Spec.Volumes[0].ConfigMap.Name, Namespace: namespace}, cm)
+	require.Nil(t, err)
+}
+
 func TestFlagdContainerInjector_createConfigMap(t *testing.T) {
 	_ = api.AddToScheme(scheme.Scheme)
 
@@ -973,6 +1112,101 @@ func getExpectedPod(namespace string) v1.Pod {
 	}
 }
 
+func getExpectedStandalonePod(namespace string) v1.Pod {
+	return v1.Pod{
+		ObjectMeta: metav1.ObjectMeta{
+			Name:      "my-pod",
+			Namespace: namespace,
+		},
+		Spec: v1.PodSpec{
+			Containers: []v1.Container{
+				{
+					Name:       "flagd",
+					Image:      "flagd:0.5.0",
+					WorkingDir: "",
+					Ports: []v1.ContainerPort{
+						{
+							Name:          "management",
+							ContainerPort: int32(8014),
+						},
+						{
+							Name:          "flagd",
+							ContainerPort: int32(8013),
+						},
+					},
+					Env: []v1.EnvVar{
+						{
+							Name:  "flagd_my-env-var",
+							Value: "my-value",
+						},
+						{
+							Name:  "flagd_MANAGEMENT_PORT",
+							Value: "8014",
+						},
+						{
+							Name:  "flagd_PORT",
+							Value: "8013",
+						},
+						{
+							Name:  "flagd_EVALUATOR",
+							Value: "",
+						},
+						{
+							Name:  "flagd_LOG_FORMAT",
+							Value: "",
+						},
+						{
+							Name:  "flagd_RESOLVER",
+							Value: "rpc",
+						},
+					},
+					Resources: getResourceRequirements(),
+					LivenessProbe: &v1.Probe{
+						ProbeHandler: v1.ProbeHandler{
+							HTTPGet: &v1.HTTPGetAction{
+								Path:   "/healthz",
+								Port:   intstr.IntOrString{Type: 0, IntVal: 8014, StrVal: ""},
+								Host:   "",
+								Scheme: "HTTP",
+							},
+						},
+						InitialDelaySeconds: 5,
+					},
+					ReadinessProbe: &v1.Probe{
+						ProbeHandler: v1.ProbeHandler{
+							HTTPGet: &v1.HTTPGetAction{
+								Path:   "/readyz",
+								Port:   intstr.IntOrString{Type: 0, IntVal: 8014, StrVal: ""},
+								Host:   "",
+								Scheme: "HTTP",
+							},
+						},
+						InitialDelaySeconds: 5,
+					},
+					VolumeMounts:    []v1.VolumeMount{},
+					ImagePullPolicy: "Always",
+					SecurityContext: &v1.SecurityContext{
+						Capabilities: &v1.Capabilities{
+							Drop: []v1.Capability{
+								"ALL",
+							},
+						},
+						Privileged:               utils.FalseVal(),
+						RunAsUser:                intPtr(65532),
+						RunAsGroup:               intPtr(65532),
+						RunAsNonRoot:             utils.TrueVal(),
+						ReadOnlyRootFilesystem:   utils.TrueVal(),
+						AllowPrivilegeEscalation: utils.FalseVal(),
+						SeccompProfile: &v1.SeccompProfile{
+							Type: "RuntimeDefault",
+						},
+					},
+				},
+			},
+		},
+	}
+}
+
 func generatePod(containers []v1.Container, initContainers []v1.Container, ownerRef []metav1.OwnerReference, ns string) v1.Pod {
 	return v1.Pod{
 		ObjectMeta: metav1.ObjectMeta{