test(controlplane): add tests for STACKIT pod identity webhook

Author: jastBytes

pkg/controller/controlplane/valuesprovider_test.go

@@ -495,6 +495,13 @@ var _ = Describe("ValuesProvider", func() {
 			},
 		})
 
+		stackitPodIdentityWebhookChartSeedValues := map[string]any{
+			"replicaCount": 2,
+			"webhook": map[string]any{
+				"tlsSecretName": "stackit-pod-identity-webhook-server",
+			},
+		}
+
 		BeforeEach(func() {
 			c.EXPECT().Get(ctx, cpConfigKey, &corev1.Secret{}).DoAndReturn(clientGet(cpConfig))
 			c.EXPECT().Delete(context.TODO(), &networkingv1.NetworkPolicy{ObjectMeta: metav1.ObjectMeta{Name: "allow-kube-apiserver-to-csi-snapshot-validation", Namespace: cp.Namespace}})
@@ -515,6 +522,7 @@ var _ = Describe("ValuesProvider", func() {
 			By("creating secrets managed outside of this package for whose secretsmanager.Get() will be called")
 			Expect(fakeClient.Create(context.TODO(), &corev1.Secret{ObjectMeta: metav1.ObjectMeta{Name: "ca-provider-openstack-controlplane", Namespace: namespace}})).To(Succeed())
 			Expect(fakeClient.Create(context.TODO(), &corev1.Secret{ObjectMeta: metav1.ObjectMeta{Name: "cloud-controller-manager-server", Namespace: namespace}})).To(Succeed())
+			Expect(fakeClient.Create(context.TODO(), &corev1.Secret{ObjectMeta: metav1.ObjectMeta{Name: "stackit-pod-identity-webhook-server", Namespace: namespace}})).To(Succeed())
 
 			// This call is made for emergency Loadbalancer API access.
 			// It will return a NotFound error by default to not interfere with existing tests.
@@ -557,6 +565,7 @@ var _ = Describe("ValuesProvider", func() {
 						"replicas": 1,
 					},
 				}),
+				stackit.STACKITPodIdentityWebhookName:     stackitPodIdentityWebhookChartSeedValues,
 				openstack.STACKITALBControllerManagerName: empty(),
 			}))
 		})
@@ -600,6 +609,7 @@ var _ = Describe("ValuesProvider", func() {
 						"replicas": 1,
 					},
 				}),
+				stackit.STACKITPodIdentityWebhookName:     stackitPodIdentityWebhookChartSeedValues,
 				openstack.STACKITALBControllerManagerName: empty(),
 			}))
 		})
@@ -881,6 +891,12 @@ var _ = Describe("ValuesProvider", func() {
 	})
 
 	Describe("#GetControlPlaneShootChartValues", func() {
+		stackitPodIdentityWebhookChartShootValues := map[string]any{
+			"webhook": map[string]any{
+				"caBundle": "",
+			},
+		}
+
 		BeforeEach(func() {
 			By("creating secrets managed outside of this package for whose secretsmanager.Get() will be called")
 			Expect(fakeClient.Create(context.TODO(), &corev1.Secret{ObjectMeta: metav1.ObjectMeta{Name: "ca-provider-openstack-controlplane", Namespace: namespace}})).To(Succeed())
@@ -903,7 +919,8 @@ var _ = Describe("ValuesProvider", func() {
 						"rescanBlockStorageOnResize": rescanBlockStorageOnResize,
 						"userAgentHeaders":           []string{domainName, tenantName, technicalID},
 					}),
-					openstack.CSINodeName: enabledFalse,
+					openstack.CSINodeName:                 enabledFalse,
+					stackit.STACKITPodIdentityWebhookName: stackitPodIdentityWebhookChartShootValues,
 				}))
 			})
 
@@ -921,7 +938,8 @@ var _ = Describe("ValuesProvider", func() {
 						"rescanBlockStorageOnResize": rescanBlockStorageOnResize,
 						"userAgentHeaders":           []string{domainName, tenantName, technicalID},
 					}),
-					openstack.CSINodeName: enabledFalse,
+					openstack.CSINodeName:                 enabledFalse,
+					stackit.STACKITPodIdentityWebhookName: stackitPodIdentityWebhookChartShootValues,
 				}))
 			})
 		})