# Copyright Materialize, Inc. and contributors. All rights reserved.
#
# Use of this software is governed by the Business Source License
# included in the LICENSE file at the root of this repository.
#
# As of the Change Date specified in that file, in accordance with
# the Business Source License, use of this software will be governed
# by the Apache License, Version 2.0.

suite: test clusterrole
templates:
  - clusterrole.yaml
tests:
  - it: should create a clusterrole when RBAC is enabled
    set:
      rbac.create: true
    asserts:
      - isKind:
          of: ClusterRole
      - contains:
          path: rules
          content:
            apiGroups: [""]
            resources: ["configmaps", "persistentvolumeclaims", "pods", "namespaces", "secrets", "serviceaccounts", "services"]
            verbs: ["create", "update", "patch", "delete", "get", "list", "watch"]

  - it: should not create a clusterrole when RBAC is disabled
    set:
      rbac.create: false
    asserts:
      - hasDocuments:
          count: 0