diff --git a/src/main/helm/templates/deployment.yaml b/src/main/helm/templates/deployment.yaml index 49b2f95fe5141f8059de921e1e6a656ea5670ddd..711c0d02bed2c1fb0c81025ae0d25b467df2962c 100644 --- a/src/main/helm/templates/deployment.yaml +++ b/src/main/helm/templates/deployment.yaml @@ -182,14 +182,16 @@ spec: {{- end }} {{- if ((.Values.ozgcloud).antragraum).enabled }} + - name: ozgcloud_antragraum_enabled + value: {{ quote .Values.ozgcloud.antragraum.enabled }} - name: ozgcloud_antragraum_url value: {{ quote (required "ozgcloud.antragraum.url must be set if ozgcloud.antragraum is enabled" ((.Values.ozgcloud).antragraum).url) }} - name: ozgcloud_antragraum_metadatauri - value: {{ quote (required "ozgcloud.antragraum.metadataUri must be set if ozgcloud.antragraum is enabled" ((.Values.ozgcloud).antragraum).metadatauri) }} - - name: ozgcloud_antragraum_decryptionprivateKey - value: {{ quote (required "ozgcloud.antragraum.decryptionPrivateKey must be set if ozgcloud.antragraum is enabled" ((.Values.ozgcloud).antragraum).decryptionprivateKey) }} + value: {{ quote (required "ozgcloud.antragraum.metadataUri must be set if ozgcloud.antragraum is enabled" ((.Values.ozgcloud).antragraum).metadataUri) }} + - name: ozgcloud_antragraum_decryptionprivatekey + value: {{ quote (required "ozgcloud.antragraum.decryptionPrivateKey must be set if ozgcloud.antragraum is enabled" ((.Values.ozgcloud).antragraum).decryptionPrivateKey) }} - name: ozgcloud_antragraum_decryptioncertificate - value: {{ quote (required "ozgcloud.antragraum.decryptionCertificate must be set if ozgcloud.antragraum is enabled" ((.Values.ozgcloud).antragraum).decryptioncertificate) }} + value: {{ quote (required "ozgcloud.antragraum.decryptionCertificate must be set if ozgcloud.antragraum is enabled" ((.Values.ozgcloud).antragraum).decryptionCertificate) }} {{- end }} diff --git a/src/test/helm/deployment_antragraum_test.yaml b/src/test/helm/deployment_antragraum_test.yaml index 0e76550a1082d2551d918d8b5304f884c9a9f807..1fb57eb52b13e0f2e8226e262aa10f48c0a00700 100644 --- a/src/test/helm/deployment_antragraum_test.yaml +++ b/src/test/helm/deployment_antragraum_test.yaml @@ -47,23 +47,33 @@ tests: content: name: ozgcloud_antragraum_enabled value: "true" + - it: should fail if antragraum url is not set + set: + ozgcloud: + environment: dev + antragraum: + enabled: true + url: + asserts: + - failedTemplate: + errorMessage: "ozgcloud.antragraum.url must be set if ozgcloud.antragraum is enabled" - - it: should set antragraum url + - it: should set metadataUri asserts: - contains: path: spec.template.spec.containers[0].env content: - name: ozgcloud_antragraum_url - value: "https://antragraum.address" - - it: should fail if antragraum url is not set + name: ozgcloud_antragraum_metadatauri + value: "classpath:/bayernid/metadata/bayernid-idp-infra.xml" + - it: should fail if metadataUri is not set set: ozgcloud: antragraum: - url: + metadataUri: asserts: - failedTemplate: - errorMessage: "ozgcloud.antragraum.url must be set if ozgcloud.antragraum is enabled" - + errorMessage: "ozgcloud.antragraum.metadataUri must be set if ozgcloud.antragraum is enabled" + - it: should set metadataUri asserts: - contains: @@ -74,42 +84,40 @@ tests: - it: should fail if metadataUri is not set set: ozgcloud: - abtragraum: + antragraum: metadataUri: asserts: - failedTemplate: errorMessage: "ozgcloud.antragraum.metadataUri must be set if ozgcloud.antragraum is enabled" - - it: should set antragraum decryptionPrivateKey + - it: should set decryptionPrivateKey asserts: - contains: path: spec.template.spec.containers[0].env content: name: ozgcloud_antragraum_decryptionprivatekey value: "decryptionPrivateKey_secret" - - it: should fail if antragraum decryptionPrivateKey is not set + - it: should fail if decryptionPrivateKey is not set set: ozgcloud: - bayernid: - absender: - dienst: + antragraum: + decryptionPrivateKey: asserts: - failedTemplate: errorMessage: "ozgcloud.antragraum.decryptionPrivateKey must be set if ozgcloud.antragraum is enabled" - - it: should set antragraum decryptionCertificate + - it: should set decryptionPrivateKey asserts: - contains: path: spec.template.spec.containers[0].env content: name: ozgcloud_antragraum_decryptioncertificate value: "decryptionCertificate_secret" - - it: should fail if antragraum decryptionCertificate is not set + - it: should fail if decryptionCertificate is not set set: ozgcloud: - bayernid: - absender: - dienst: + antragraum: + decryptionCertificate: asserts: - failedTemplate: errorMessage: "ozgcloud.antragraum.decryptionCertificate must be set if ozgcloud.antragraum is enabled" \ No newline at end of file